Red Hat Security Advisory

RHSA-2024:8415

OpenShift Container Platform 4.16.19 bug fix and security update

Released 2024-10-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-console-rhel9, openshift4/ose-ironic-rhel9, openshift4/ose-kube-rbac-proxy-rhel9

Fixes 3 records

TI-2024-06036 CVE-2024-6508 · GHSA-4crf-28c7-v4gr

Openshift-console: oauth2 insufficient state parameter entropy

HIGH 70

An insufficient entropy vulnerability was found in the Openshift Console.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00673 Published 2024-08-21 Fixed in v4.12.0-202412201659.p0.g8910d84.assembly.stream.el8, v4.13.0-202411300029.p0.g68accd9.assembly.stream.el8 +167 CWE-331

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-31566 CVE-2024-47211 · GHSA-8h22-6qwx-q4w9

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before…

LOW 25

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to conver…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00663 Published 2024-10-04 Fixed in 26.1.1, 24.1.3 +1 CWE-354