Red Hat Security AdvisoryRHSA-2024:8697
OpenShift Container Platform 4.14.40 bug fix and security update
Released 2024-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
Fixes 5 records
Priority MEDIUM 53
The filename parameter of the Context.FileAttachment function is not properly sanitized.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00482 · Published 2023-06-08 · Partial fix · 1.9.1 CWE-494
Priority MEDIUM 42
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01414 · Published 2024-07-02 · Partial fix · 1.21.12, 1.22.5
Priority MEDIUM 41
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1 CWE-674
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01127 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
Priority LOW 22
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00839 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
THREATIST.IORead the docs