Red Hat Security Advisory

RHSA-2024:7590

OpenShift Container Platform 4.12.67 bug fix and security update

Released 2024-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-ironic-rhel9, rhcos

Fixes 2 records

TI-2024-02768 CVE-2024-2961 · GHSA-22q4-f5r6-3xqw

Out-of-bounds write in GNU glibc

HIGH 74

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an a…

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.8833 Published 2024-04-17 Partial fix · 2.40 CWE-787

TI-2024-28340 CVE-2024-42353 · GHSA-mg3v-6m49-jhp3

WebOb's location header normalization during redirect leads to open redirect

LOW 28

WebOb provides objects for HTTP requests and responses.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00569 Published 2024-08-14 Partial fix · 1.8.8 CWE-601