Red Hat Security AdvisoryRHSA-2024:8260
OpenShift Container Platform 4.16.18 bug fix and security update
Released 2024-10-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 6 records
Priority MEDIUM 42
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01414 · Published 2024-07-02 · Partial fix · 1.21.12, 1.22.5
Priority MEDIUM 41
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1 CWE-674
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01127 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
Priority LOW 39
A flaw was found in the github.com/containers/image library.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.01279 · Published 2024-05-09 · Partial fix · 5.29.3, 5.30.1 +66 CWE-354
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
Priority LOW 22
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00839 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
THREATIST.IORead the docs