Read the docs
TI-2024-16303 Aliases CVE-2024-24786GHSA-8r3f-844c-mc37

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

Priority MEDIUM 41CWE-835Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 54 fixed, 30 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-835.

Summary

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01262 69th percentileScored 2026-11-07
Fix Partial google.golang.org/protobuf/encoding/protojson (google.golang.org/protobuf): 1.33.0google.golang.org/protobuf/internal/encoding/json (google.golang.org/protobuf): 1.33.0+3 more productsRed Hat: 122 advisoriesRed Hat: 54 fixed, 30 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
google.golang.org/protobufgoogle.golang.org/protobuf/encoding/protojsonbefore 1.33.01.33.0Patch availableCNA
google.golang.org/protobufgoogle.golang.org/protobuf/internal/encoding/jsonbefore 1.33.01.33.0Patch availableCNA
—google.golang.org/protobuf (Go)before 1.33.01.33.0Patch availableGHSA-8r3f-844c-mc37
—google.golang.org/protobuf/encoding/protojson (Go)before 1.33.01.33.0Patch availableGHSA-8r3f-844c-mc37
—google.golang.org/protobuf/internal/encoding/json (Go)before 1.33.01.33.0Patch availableGHSA-8r3f-844c-mc37
  • google.golang.org/protobuf/encoding/protojson Vendorgoogle.golang.org/protobuf Affected before 1.33.0 Fixed in 1.33.0 Patch available CNA
  • google.golang.org/protobuf/internal/encoding/json Vendorgoogle.golang.org/protobuf Affected before 1.33.0 Fixed in 1.33.0 Patch available CNA
  • google.golang.org/protobuf (Go) Vendor— Affected before 1.33.0 Fixed in 1.33.0 Patch available GHSA-8r3f-844c-mc37
  • google.golang.org/protobuf/encoding/protojson (Go) Vendor— Affected before 1.33.0 Fixed in 1.33.0 Patch available GHSA-8r3f-844c-mc37
  • google.golang.org/protobuf/internal/encoding/json (Go) Vendor— Affected before 1.33.0 Fixed in 1.33.0 Patch available GHSA-8r3f-844c-mc37

Remediation

  • Fix · CNA google.golang.org/protobuf/encoding/protojson (google.golang.org/protobuf) Fixed in 1.33.0
  • Fix · CNA google.golang.org/protobuf/internal/encoding/json (google.golang.org/protobuf) Fixed in 1.33.0
  • Fix · GHSA-8r3f-844c-mc37 google.golang.org/protobuf (Go) Fixed in 1.33.0 Advisory →
  • Fix · GHSA-8r3f-844c-mc37 google.golang.org/protobuf/encoding/protojson (Go) Fixed in 1.33.0 Advisory →
  • Fix · GHSA-8r3f-844c-mc37 google.golang.org/protobuf/internal/encoding/json (Go) Fixed in 1.33.0 Advisory →

Red Hat 122 advisories

  • RHSA-2026:89715 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.16.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:80693 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images kubernetes1.36-1.36.5-1.1.hum1@aarch64, kubernetes1.36-1.36.5-1.1.hum1@s390x, kubernetes1.36-1.36.5-1.1.hum1@src +10
  • RHSA-2026:80686 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images caddy-2.11.7-0.2.hum1@aarch64, caddy-2.11.7-0.2.hum1@s390x, caddy-2.11.7-0.2.hum1@src +1
Show 119 more Red Hat advisories
  • RHSA-2026:80683 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images k6v2-2.3.0-0.2.hum1@aarch64, k6v2-2.3.0-0.2.hum1@src, k6v2-2.3.0-0.2.hum1@x86_64
  • RHSA-2026:80682 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images cosign-3.1.3-0.3.hum1@aarch64, cosign-3.1.3-0.3.hum1@s390x, cosign-3.1.3-0.3.hum1@src +1
  • RHSA-2026:80677 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images hugo-0.167.0-0.2.hum1@aarch64, hugo-0.167.0-0.2.hum1@s390x, hugo-0.167.0-0.2.hum1@src +1
  • RHSA-2026:80676 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images trivy-0.75.0-0.2.hum1@aarch64, trivy-0.75.0-0.2.hum1@s390x, trivy-0.75.0-0.2.hum1@src +1
  • RHSA-2026:80673 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images tempo3.0-3.0.3-0.5.hum1@aarch64, tempo3.0-3.0.3-0.5.hum1@src, tempo3.0-3.0.3-0.5.hum1@x86_64
  • RHSA-2026:80671 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images kubernetes1.35-1.35.9-0.2.hum1@aarch64, kubernetes1.35-1.35.9-0.2.hum1@s390x, kubernetes1.35-1.35.9-0.2.hum1@src +10
  • RHSA-2026:80672 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-contrib-0.162.0-0.3.hum1@aarch64, opentelemetry-collector-contrib-0.162.0-0.3.hum1@s390x, opentelemetry-collector-contrib-0.162.0-0.3.hum1@src +1
  • RHSA-2026:80670 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images tempo2.10-2.10.8-0.5.hum1@aarch64, tempo2.10-2.10.8-0.5.hum1@src, tempo2.10-2.10.8-0.5.hum1@x86_64
  • RHSA-2026:80668 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-k8s-0.162.0-0.2.hum1@aarch64, opentelemetry-collector-k8s-0.162.0-0.2.hum1@s390x, opentelemetry-collector-k8s-0.162.0-0.2.hum1@src +1
  • RHSA-2026:80666 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentofu1.12-1.12.7-0.2.hum1@aarch64, opentofu1.12-1.12.7-0.2.hum1@s390x, opentofu1.12-1.12.7-0.2.hum1@src +1
  • RHSA-2026:80661 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images kube-state-metrics-2.20.0-0.3.hum1@aarch64, kube-state-metrics-2.20.0-0.3.hum1@s390x, kube-state-metrics-2.20.0-0.3.hum1@src +1
  • RHSA-2026:80660 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentofu1.10-1.10.10-0.5.hum1@aarch64, opentofu1.10-1.10.10-0.5.hum1@s390x, opentofu1.10-1.10.10-0.5.hum1@src +1
  • RHSA-2026:80659 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-0.162.0-0.2.hum1@aarch64, opentelemetry-collector-0.162.0-0.2.hum1@s390x, opentelemetry-collector-0.162.0-0.2.hum1@src +1
  • RHSA-2026:80658 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images k6v1-1.8.1-0.2.hum1@aarch64, k6v1-1.8.1-0.2.hum1@src, k6v1-1.8.1-0.2.hum1@x86_64
  • RHSA-2026:80657 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images helm4-4.3.0-0.3.hum1@aarch64, helm4-4.3.0-0.3.hum1@s390x, helm4-4.3.0-0.3.hum1@src +1
  • RHSA-2026:80656 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images helm3-3.22.0-0.3.hum1@aarch64, helm3-3.22.0-0.3.hum1@s390x, helm3-3.22.0-0.3.hum1@src +1
  • RHSA-2026:80654 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images distribution-3.1.2-0.2.hum1@aarch64, distribution-3.1.2-0.2.hum1@s390x, distribution-3.1.2-0.2.hum1@src +1
  • RHSA-2026:80653 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images oauth2-proxy-7.15.5-0.2.hum1@aarch64, oauth2-proxy-7.15.5-0.2.hum1@s390x, oauth2-proxy-7.15.5-0.2.hum1@src +1
  • RHSA-2026:80652 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images rekor-1.5.4-0.2.hum1@src, rekor-server-1.5.4-0.2.hum1@aarch64, rekor-server-1.5.4-0.2.hum1@s390x +1
  • RHSA-2026:80651 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images podman-6.1.3-1.1.hum1@aarch64, podman-6.1.3-1.1.hum1@s390x, podman-6.1.3-1.1.hum1@src +12
  • RHSA-2026:80650 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images etcd-3.7.2-0.2.hum1@aarch64, etcd-3.7.2-0.2.hum1@s390x, etcd-3.7.2-0.2.hum1@src +1
  • RHSA-2026:80649 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grype-0.119.0-0.2.hum1@aarch64, grype-0.119.0-0.2.hum1@s390x, grype-0.119.0-0.2.hum1@src +1
  • RHSA-2026:80647 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images syft-1.54.1-0.2.hum1@aarch64, syft-1.54.1-0.2.hum1@s390x, syft-1.54.1-0.2.hum1@src +1
  • RHSA-2026:80646 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images dex-2.46.0-0.2.hum1@aarch64, dex-2.46.0-0.2.hum1@s390x, dex-2.46.0-0.2.hum1@src +1
  • RHSA-2026:80643 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images buildah-1.45.1-1.1.hum1@aarch64, buildah-1.45.1-1.1.hum1@s390x, buildah-1.45.1-1.1.hum1@src +1
  • RHSA-2026:80637 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images git-sync-4.7.1-0.2.hum1@aarch64, git-sync-4.7.1-0.2.hum1@s390x, git-sync-4.7.1-0.2.hum1@src +1
  • RHSA-2026:80634 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images fulcio-1.9.0-0.2.hum1@aarch64, fulcio-1.9.0-0.2.hum1@s390x, fulcio-1.9.0-0.2.hum1@src +1
  • RHSA-2026:80632 Released 2026-10-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images skopeo-1.24.1-1.1.hum1@aarch64, skopeo-1.24.1-1.1.hum1@s390x, skopeo-1.24.1-1.1.hum1@src +4
  • RHSA-2026:77895 Released 2026-10-07 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images prometheus3.13-3.13.4-0.1.hum1@aarch64, prometheus3.13-3.13.4-0.1.hum1@src, prometheus3.13-3.13.4-0.1.hum1@x86_64
  • RHSA-2026:76876 Released 2026-10-06 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images jaeger-2.21.0-0.1.hum1@aarch64, jaeger-2.21.0-0.1.hum1@src, jaeger-2.21.0-0.1.hum1@x86_64
  • RHSA-2026:76677 Released 2026-10-06 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grafana12.4-12.4.12-0.4.hum1@aarch64, grafana12.4-12.4.12-0.4.hum1@src, grafana12.4-12.4.12-0.4.hum1@x86_64
  • RHSA-2026:76448 Released 2026-10-05 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grafana13.1-13.1.7-0.1.hum1@aarch64, grafana13.1-13.1.7-0.1.hum1@src, grafana13.1-13.1.7-0.1.hum1@x86_64
  • RHSA-2026:76430 Released 2026-10-05 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grafana13.2-13.2.3-0.1.hum1@aarch64, grafana13.2-13.2.3-0.1.hum1@src, grafana13.2-13.2.3-0.1.hum1@x86_64
  • RHSA-2026:72570 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.6-3.6.17-0.3.hum1@aarch64, loki3.6-3.6.17-0.3.hum1@src, loki3.6-3.6.17-0.3.hum1@x86_64 +4
  • RHSA-2026:72496 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.7-3.7.8-0.3.hum1@aarch64, loki3.7-3.7.8-0.3.hum1@src, loki3.7-3.7.8-0.3.hum1@x86_64 +4
  • RHSA-2026:72493 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.15-1.15.3-0.2.hum1@aarch64, spire1.15-1.15.3-0.2.hum1@src, spire1.15-1.15.3-0.2.hum1@x86_64 +6
  • RHSA-2026:72489 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.14-1.14.7-0.5.hum1@aarch64, spire1.14-1.14.7-0.5.hum1@src, spire1.14-1.14.7-0.5.hum1@x86_64 +6
  • RHSA-2026:0722 Released 2026-01-15 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.4 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9 +14
  • RHSA-2025:22684 Released 2025-12-03 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9 +5
  • RHSA-2025:22683 Released 2025-12-03 · Red Hat rating Moderate
    multicluster engine for Kubernetes v2.7.7 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +8
  • RHSA-2025:9776 Released 2025-06-26 · Red Hat rating Important
    New RHCS 8.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 8.1 Tools rhceph/grafana-rhel9, rhceph/keepalived-rhel9, rhceph/oauth2-proxy-rhel9 +4
  • RHSA-2025:4204 Released 2025-04-30 · Red Hat rating Important
    OpenShift Container Platform 4.17.27 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-cluster-etcd-rhel9-operator, openshift4/ose-oauth-proxy-rhel9
  • RHSA-2025:2449 Released 2025-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.4 security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-docker-builder-rhel9, openshift4/ose-nutanix-machine-controllers-rhel9 +6
  • RHSA-2024:6122 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2025:0654 Released 2025-01-28 · Red Hat rating Important
    OpenShift Container Platform 4.17.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-baremetal-cluster-api-controllers-rhel9 +6
  • RHSA-2025:0664 Released 2025-01-23 · Red Hat rating Moderate
    Release of OpenShift Serverless Logic 1.35.0 security update & enhancements
    • 8Base-Openshift-Serverless-1.35 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8 +7
  • RHSA-2024:10852 Released 2024-12-05 · Red Hat rating Important
    RHOAI 2.16.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8 +4
  • RHSA-2024:8704 Released 2024-12-02 · Red Hat rating Moderate
    Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9
    • KDO 5.0 for RHEL 9 kube-descheduler-operator/descheduler-rhel9, kube-descheduler-operator/kube-descheduler-rhel9-operator
  • RHSA-2024:10147 Released 2024-11-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.24 security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-nutanix-cloud-controller-manager-rhel9, rhcos
  • RHSA-2024:9615 Released 2024-11-20 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-openshift-controller-manager-rhel9-operator
  • RHSA-2024:8677 Released 2024-10-30 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.12.6 security update
    • Red Hat OpenShift GitOps 1.12 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
  • RHSA-2024:8676 Released 2024-10-30 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.17.0 Security, Enhancement, & Bug Fix Update
    • RHODF 4.17 for RHEL 9 odf4/mcg-core-rhel9, odf4/ocs-client-console-rhel9, odf4/odf-console-rhel9 +3
  • RHSA-2024:8415 Released 2024-10-30 · Red Hat rating Important
    OpenShift Container Platform 4.16.19 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-console-rhel9, openshift4/ose-ironic-rhel9, openshift4/ose-kube-rbac-proxy-rhel9
  • RHSA-2024:8434 Released 2024-10-29 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.3 security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-kube-rbac-proxy-rhel9
  • RHSA-2024:7922 Released 2024-10-16 · Red Hat rating Important
    OpenShift Container Platform 4.17.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:7548 Released 2024-10-16 · Red Hat rating Moderate
    Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9
    • RODOO 1.2 for RHEL 9 run-once-duration-override-operator/run-once-duration-override-operator-bundle, run-once-duration-override-operator/run-once-duration-override-rhel9, run-once-duration-override-operator/run-once-duration-override-rhel9-operator
  • RHSA-2024:8040 Released 2024-10-14 · Red Hat rating Moderate
    Cluster Observability Operator 0.4.1
    • COO 0.4 for RHEL 8 cluster-observability-operator/cluster-observability-operator-bundle, cluster-observability-operator/cluster-observability-rhel8-operator, cluster-observability-operator/coo-admission-webhook-rhel8 +10
  • RHSA-2024:7184 Released 2024-10-03 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.38 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-apiserver-network-proxy-rhel8, openshift4/ose-hypershift-rhel8 +1
  • RHSA-2024:3718 Released 2024-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:3717 Released 2024-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.0 security and extras update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-operator-sdk-rhel9, openshift4/ose-sriov-network-device-plugin-rhel9
  • RHSA-2024:6824 Released 2024-09-24 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.14 security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-baremetal-rhel9-operator, openshift4/ose-docker-builder-rhel9, openshift4/ose-machine-config-rhel9-operator
  • RHSA-2024:6409 Released 2024-09-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.31 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-apiserver-network-proxy-rhel9, openshift4/ose-hypershift-rhel9, openshift4/ose-ibm-cloud-controller-manager-rhel9
  • RHSA-2024:6004 Released 2024-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.16.10 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-baremetal-operator-rhel9, openshift4/ose-csi-driver-manila-rhel9, openshift4/ose-hypershift-rhel9 +2
  • RHSA-2024:6221 Released 2024-09-03 · Red Hat rating Critical
    The Red Hat OpenShift Builds 1.1.0 General Availability
    • Builds for Red Hat OpenShift
  • RHSA-2024:5422 Released 2024-08-20 · Red Hat rating Important
    OpenShift Container Platform 4.16.8 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-kube-apiserver-rhel9-operator, rhcos
  • RHSA-2024:5054 Released 2024-08-06 · Red Hat rating Important
    OpenShift Virtualization 4.16.1 Images security update
    • CNV 4.16 for RHEL 9 container-native-virtualization/hostpath-csi-driver-rhel9, container-native-virtualization/kubevirt-console-plugin-rhel9, container-native-virtualization/virt-cdi-cloner-rhel9
  • RHSA-2024:5013 Released 2024-08-05 · Red Hat rating Critical
    The Red Hat OpenShift Builds Client 1.1.0 General Availability
    • Builds for Red Hat OpenShift 1.1.1 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9
  • RHSA-2024:4626 Released 2024-07-18 · Red Hat rating Moderate
    Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update
    • Red Hat OpenShift GitOps 1.11 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8 +6
  • RHSA-2024:4597 Released 2024-07-17 · Red Hat rating Important
    Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.15 jenkins-2-plugins-4.15.1718879538-1.el8, jenkins-2.440.3.1718879390-3.el8
  • RHSA-2024:4591 Released 2024-07-17 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.0 security, enhancement & bug fix update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-operator-bundle +8
  • RHSA-2024:4455 Released 2024-07-10 · Red Hat rating Moderate
    OpenShift Virtualization 4.16.0 Images security update
    • CNV 4.16 for RHEL 9 container-native-virtualization/kubevirt-console-plugin-rhel9, container-native-virtualization/kubevirt-ssp-operator-rhel9, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9 +1
  • RHSA-2024:4150 Released 2024-07-02 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.20 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-clusterresourceoverride-rhel9
  • RHSA-2024:4246 Released 2024-07-02 · Red Hat rating Moderate
    container-tools security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.0-1.module+el8.10.0+21962+8143777b.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21962+8143777b.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21962+8143777b.s390x::container-tools:rhel8 +47
  • RHSA-2024:3617 Released 2024-07-01 · Red Hat rating Moderate
    Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9
    • KDO 5.0 for RHEL 9 kube-descheduler-operator/descheduler-rhel9, kube-descheduler-operator/kube-descheduler-operator-bundle, kube-descheduler-operator/kube-descheduler-rhel9-operator
  • RHSA-2024:3637 Released 2024-07-01 · Red Hat rating Moderate
    Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9
    • OSSO 1.3 for RHEL 9 openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle, openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator
  • RHSA-2024:1616 Released 2024-07-01 · Red Hat rating Important
    Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9
    • RODOO 1.1 for RHEL 9 run-once-duration-override-operator/run-once-duration-override-operator-bundle, run-once-duration-override-operator/run-once-duration-override-rhel9, run-once-duration-override-operator/run-once-duration-override-rhel9-operator
  • RHSA-2024:0043 Released 2024-06-27 · Red Hat rating Important
    Red Hat build of MicroShift 4.16.0 security update
    • Red Hat OpenShift Container Platform 4.16 microshift-4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9, microshift-greenboot-4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9, microshift-multus-4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9 +6
  • RHSA-2024:0045 Released 2024-06-27 · Red Hat rating Important
    OpenShift Container Platform 4.16.0 security update
    • Ironic content for Red Hat OpenShift Container Platform 4.16 python-eventlet-0.33.1-6.el9, python3-eventlet-0.33.1-6.el9
    • Red Hat OpenShift Container Platform 4.16 butane-0.21.0-1.rhaos4.16.el8, butane-redistributable-0.21.0-1.rhaos4.16.el8, cri-o-1.29.5-5.rhaos4.16.git7032128.el8 +43
  • RHSA-2024:4163 Released 2024-06-27 · Red Hat rating Moderate
    Errata Advisory for Red Hat OpenShift GitOps v1.12.4 security update
    • Red Hat OpenShift GitOps 1.12 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
  • RHSA-2024:0041 Released 2024-06-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:0040 Released 2024-06-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.0 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ansible-operator, openshift4/ose-aws-efs-csi-driver-container-rhel9, openshift4/ose-cloud-event-proxy-rhel9 +11
  • RHSA-2024:4028 Released 2024-06-20 · Red Hat rating Moderate
    Release of OpenShift Serverless 1.33.0 security update & enhancements
    • Red Hat OpenShift Serverless 1.33 openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1/client-kn-rhel8 +33
  • RHSA-2024:3868 Released 2024-06-17 · Red Hat rating Important
    Network Observability 1.6.0 for OpenShift
    • NETOBSERV 1.6 for RHEL 9 network-observability/network-observability-cli-rhel9, network-observability/network-observability-console-plugin-rhel9, network-observability/network-observability-ebpf-agent-rhel9 +3
  • RHSA-2024:3715 Released 2024-06-12 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.59 packages and security update
    • Red Hat OpenShift Container Platform 4.12 openshift-4.12.0-202406040636.p0.g306a47e.assembly.stream.el8, openshift-4.12.0-202406040636.p0.g306a47e.assembly.stream.el9, openshift-hyperkube-4.12.0-202406040636.p0.g306a47e.assembly.stream.el8 +1
  • RHSA-2024:3683 Released 2024-06-06 · Red Hat rating Moderate
    Red Hat OpenShift Service Mesh Containers for 2.5.2 security update
    • RHOSSM 2.5 for RHEL 8 openshift-service-mesh/istio-cni-rhel8
  • RHSA-2024:3635 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.12 jenkins-2-plugins-4.12.1716445211-1.el8, jenkins-2.440.3.1716445200-3.el8
  • RHSA-2024:3634 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.14 jenkins-2-plugins-4.14.1716388016-1.el8, jenkins-2.440.3.1716387933-3.el8
  • RHSA-2024:3636 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.13 jenkins-2-plugins-4.13.1716445207-1.el8, jenkins-2.440.3.1716445150-3.el8
  • RHSA-2024:3621 Released 2024-06-05 · Red Hat rating Important
    Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update
    • Red Hat OpenShift distributed tracing 3.2 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +16
  • RHSA-2024:2901 Released 2024-05-23 · Red Hat rating Low
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update
    • OpenShift Custom Metrics Autoscaler 2 custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle +2
  • RHSA-2024:3316 Released 2024-05-23 · Red Hat rating Important
    Migration Toolkit for Applications security and bug fix update
    • MTA 7.0 for RHEL 9 mta/mta-analyzer-addon-rhel9, mta/mta-analyzer-lsp-rhel9, mta/mta-cli-rhel9 +3
  • RHSA-2024:2874 Released 2024-05-23 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.42 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-descheduler
  • RHSA-2024:3254 Released 2024-05-22 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.s390x::container-tools:rhel8 +47
  • RHSA-2024:2781 Released 2024-05-16 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.57 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-descheduler
  • RHSA-2024:2773 Released 2024-05-15 · Red Hat rating Important
    OpenShift Container Platform 4.15.13 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel8, openshift4/ose-cluster-api-rhel9 +3
  • RHSA-2024:2666 Released 2024-05-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.24 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-descheduler
  • RHSA-2024:2096 Released 2024-05-01 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.9.1
    • RHOL 5.9 for RHEL 9 openshift-logging/logging-loki-rhel9, openshift-logging/lokistack-gateway-rhel9
  • RHSA-2024:2639 Released 2024-05-01 · Red Hat rating Moderate
    Migration Toolkit for Containers (MTC) 1.7.15 security and bug fix update
    • 8Base-RHMTC-1.7 rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8, rhmtc/openshift-velero-plugin-rhel8
  • RHSA-2024:2548 Released 2024-04-30 · Red Hat rating Moderate
    podman security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-4:4.9.4-3.el9_4, podman-docker-4:4.9.4-3.el9_4, podman-plugins-4:4.9.4-3.el9_4 +2
  • RHSA-2024:2550 Released 2024-04-30 · Red Hat rating Moderate
    buildah bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.33.7-1.el9_4, buildah-tests-2:1.33.7-1.el9_4
  • RHSA-2024:2549 Released 2024-04-30 · Red Hat rating Moderate
    skopeo security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.14.3-2.el9_4, skopeo-tests-2:1.14.3-2.el9_4
  • RHSA-2024:1946 Released 2024-04-22 · Red Hat rating Moderate
    Red Hat OpenShift Service Mesh Containers for 2.5.1 security update
    • RHOSSM 2.5 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +7
  • RHSA-2024:1925 Released 2024-04-18 · Red Hat rating Moderate
    Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-ui-rhel8, rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8
  • RHSA-2024:1765 Released 2024-04-18 · Red Hat rating Important
    OpenShift Container Platform 4.14.21 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-baremetal-machine-controllers, openshift4/ose-cluster-samples-operator, openshift4/ose-kubevirt-cloud-controller-manager-rhel8 +1
  • RHSA-2024:1874 Released 2024-04-18 · Red Hat rating Moderate
    rhc-worker-script security and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) rhc-worker-script-0.7-1.el7_9
    • Red Hat Enterprise Linux Server (v. 7) rhc-worker-script-0.7-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) rhc-worker-script-0.7-1.el7_9
  • RHSA-2024:1859 Released 2024-04-16 · Red Hat rating Moderate
    OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update
    • 9Base-OADP-1.3 oadp/oadp-rhel9-operator, oadp/oadp-velero-plugin-for-csi-rhel9, oadp/oadp-velero-plugin-for-gcp-rhel9 +3
  • RHSA-2024:1795 Released 2024-04-11 · Red Hat rating Moderate
    VolSync 0.9.1 security fixes and enhancements
    • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
  • RHSA-2024:1574 Released 2024-04-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.54 packages and security update
    • Red Hat OpenShift Container Platform 4.12 buildah-1:1.23.4-5.2.rhaos4.12.el8, buildah-1:1.23.4-5.2.rhaos4.12.el9, buildah-tests-1:1.23.4-5.2.rhaos4.12.el8 +35
  • RHSA-2024:1563 Released 2024-04-02 · Red Hat rating Important
    OpenShift Container Platform 4.15.6 packages and security update
    • Red Hat OpenShift Container Platform 4.15 buildah-1:1.29.1-20.3.rhaos4.15.el8, buildah-1:1.29.1-20.3.rhaos4.15.el9, buildah-tests-1:1.29.1-20.3.rhaos4.15.el8 +35
  • RHSA-2024:1559 Released 2024-04-02 · Red Hat rating Important
    OpenShift Container Platform 4.15.6 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/kubevirt-csi-driver-rhel8, openshift4/ose-baremetal-cluster-api-controllers-rhel9
  • RHSA-2024:1538 Released 2024-03-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.12 low-latency extras security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cnf-tests-rhel8, openshift4/dpdk-base-rhel8, openshift4/noderesourcetopology-scheduler-container-rhel8 +3
  • RHSA-2024:1537 Released 2024-03-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.38 low-latency extras security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/cnf-tests-rhel8, openshift4/dpdk-base-rhel8, openshift4/noderesourcetopology-scheduler-container-rhel8 +3
  • RHSA-2024:1474 Released 2024-03-27 · Red Hat rating Moderate
    logging for Red Hat OpenShift security update
    • RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
  • RHSA-2024:1508 Released 2024-03-27 · Red Hat rating Moderate
    logging for Red Hat OpenShift security update
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:1507 Released 2024-03-27 · Red Hat rating Moderate
    logging for Red Hat OpenShift security update
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:1456 Released 2024-03-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.38 packages and security update
    • Red Hat OpenShift Container Platform 4.13 cri-o-1.26.5-10.rhaos4.13.gita08b329.el8, cri-o-1.26.5-10.rhaos4.13.gita08b329.el9
  • RHSA-2024:1461 Released 2024-03-27 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.18 packages and security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.4-5.rhaos4.14.git8d40fed.el8, cri-o-1.27.4-5.rhaos4.14.git8d40fed.el9
  • RHSA-2024:1362 Released 2024-03-20 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.17 low-latency extras security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cnf-tests-rhel8, openshift4/dpdk-base-rhel8, openshift4/noderesourcetopology-scheduler-rhel9 +3
  • RHSA-2024:1363 Released 2024-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.3 low-latency extras security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cnf-tests-rhel8, openshift4/dpdk-base-rhel8, openshift4/noderesourcetopology-scheduler-rhel9 +3

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Builds for Red Hat OpenShiftAffectedNo fix yet
Logical Volume Manager StorageAffectedNo fix yet
Migration Toolkit for VirtualizationAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 3AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Security 4AffectedNo fix planned: Will not fix
Red Hat Ceph Storage 5AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix planned: Will not fix
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Data Science (RHODS)AffectedNo fix yet: Fix deferred
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 2AffectedNo fix yet
Red Hat OpenStack Platform 16.1AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 16.2AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet: Fix deferred
Red Hat Quay 3AffectedNo fix yet
Red Hat Satellite 6Affected—
Red Hat Storage 3Affected—
Self Node Remediation OperatorAffectedNo fix yet
8Base-Openshift-Serverless-1.35Fixed RHSA-2025:0664
8Base-RHMTC-1.7Fixed RHSA-2024:2639
8Base-RHMTC-1.8Fixed RHSA-2024:1925
9Base-OADP-1.3Fixed RHSA-2024:1859
Builds for Red Hat OpenShiftFixed RHSA-2024:6221
Builds for Red Hat OpenShift 1.1.1Fixed RHSA-2024:5013
CNV 4.14 for RHEL 9Fixed—
CNV 4.16 for RHEL 9Fixed RHSA-2024:4455, RHSA-2024:5054
COO 0.4 for RHEL 8Fixed RHSA-2024:8040
KDO 5.0 for RHEL 9Fixed RHSA-2024:3617, RHSA-2024:8704
LVMS 4.14 for RHEL 9Fixed—
LVMS 4.15 for RHEL 9Fixed—
MTA 7.0 for RHEL 9Fixed RHSA-2024:3316
NETOBSERV 1.6 for RHEL 9Fixed RHSA-2024:3868
OSSO 1.3 for RHEL 9Fixed RHSA-2024:3637
OpenShift Custom Metrics Autoscaler 2Fixed RHSA-2024:2901
OpenShift Developer Tools and Services for OCP 4.12Fixed RHSA-2024:3635
OpenShift Developer Tools and Services for OCP 4.13Fixed RHSA-2024:3636
OpenShift Developer Tools and Services for OCP 4.14Fixed RHSA-2024:3634
OpenShift Developer Tools and Services for OCP 4.15Fixed RHSA-2024:4597
RHODF 4.16 for RHEL 9Fixed RHSA-2024:4591
RHODF 4.17 for RHEL 9Fixed RHSA-2024:8676
RHOL 5.6 for RHEL 8Fixed RHSA-2024:1507
RHOL 5.7 for RHEL 8Fixed RHSA-2024:1508
RHOL 5.8 for RHEL 9Fixed RHSA-2024:1474
RHOL 5.9 for RHEL 9Fixed RHSA-2024:2096
RHOSSM 2.5 for RHEL 8Fixed RHSA-2024:1946, RHSA-2024:3683
RODOO 1.1 for RHEL 9Fixed RHSA-2024:1616
RODOO 1.2 for RHEL 9Fixed RHSA-2024:7548
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9Fixed RHSA-2024:1795
Red Hat Advanced Cluster Management for Kubernetes 2.12Fixed RHSA-2025:22684
Red Hat Ceph Storage 7.1 ToolsFixed—
Red Hat Ceph Storage 8.0 ToolsFixed—
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:9776
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:3254, RHSA-2024:4246
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:2548, RHSA-2024:2549, RHSA-2024:2550
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:1874
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:1874
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:1874
Red Hat Hardened ImagesFixed RHSA-2026:72489, RHSA-2026:72493, RHSA-2026:72496, RHSA-2026:72570, RHSA-2026:76430, RHSA-2026:76448, RHSA-2026:76677, RHSA-2026:76876, RHSA-2026:77895, RHSA-2026:80632, RHSA-2026:80634, RHSA-2026:80637, RHSA-2026:80643, RHSA-2026:80646, RHSA-2026:80647, RHSA-2026:80649, RHSA-2026:80650, RHSA-2026:80651, RHSA-2026:80652, RHSA-2026:80653, RHSA-2026:80654, RHSA-2026:80656, RHSA-2026:80657, RHSA-2026:80658, RHSA-2026:80659, RHSA-2026:80660, RHSA-2026:80661, RHSA-2026:80666, RHSA-2026:80668, RHSA-2026:80670, RHSA-2026:80671, RHSA-2026:80672, RHSA-2026:80673, RHSA-2026:80676, RHSA-2026:80677, RHSA-2026:80682, RHSA-2026:80683, RHSA-2026:80686, RHSA-2026:80693
Red Hat OpenShift AI 2.16Fixed RHSA-2024:10852
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:1538, RHSA-2024:1574, RHSA-2024:2781, RHSA-2024:3715
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:1456, RHSA-2024:1537, RHSA-2024:2874
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:1362, RHSA-2024:1461, RHSA-2024:1765, RHSA-2024:2666, RHSA-2024:7184
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:1363, RHSA-2024:1559, RHSA-2024:1563, RHSA-2024:2773, RHSA-2024:4150, RHSA-2024:6409
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:0040, RHSA-2024:0041, RHSA-2024:0043, RHSA-2024:0045, RHSA-2024:10147, RHSA-2024:5422, RHSA-2024:6004, RHSA-2024:6824, RHSA-2024:8415, RHSA-2024:9615, RHSA-2026:89715
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2024:3717, RHSA-2024:3718, RHSA-2024:7922, RHSA-2024:8434, RHSA-2025:0654, RHSA-2025:4204
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2024:6122, RHSA-2025:2449
Red Hat OpenShift GitOps 1.11Fixed RHSA-2024:4626
Red Hat OpenShift GitOps 1.12Fixed RHSA-2024:4163, RHSA-2024:8677
Red Hat OpenShift Serverless 1.33Fixed RHSA-2024:4028
Red Hat OpenShift distributed tracing 3.2Fixed RHSA-2024:3621
multicluster engine for Kubernetes 2.7Fixed RHSA-2025:22683
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:0722
Not affected: 40 products
  • 8Base-RHMTC-1.7
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.3
  • Builds for Red Hat OpenShift 1.1.1
  • CNV 4.16 for RHEL 9
  • Ironic content for Red Hat OpenShift Container Platform 4.16
  • KDO 5.0 for RHEL 9
  • MTA 7.0 for RHEL 8
  • MTA 7.0 for RHEL 9
  • Multicluster Engine for Kubernetes
  • OSSO 1.3 for RHEL 9
  • OpenShift API for Data Protection
  • OpenShift Serverless
  • RHODF 4.16 for RHEL 9
  • RHODF 4.17 for RHEL 9
  • RHOL 5.9 for RHEL 9
  • RHOSSM 2.5 for RHEL 8
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.12
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images
  • Red Hat OpenShift AI 2.16
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Data Science (RHODS)
  • Red Hat OpenShift GitOps
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4
  • Red Hat Satellite 6
  • cert-manager Operator for Red Hat OpenShift
  • multicluster engine for Kubernetes 2.7
  • multicluster engine for Kubernetes 2.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-24786
  2. 2026-10-03 Alias added: GHSA-8r3f-844c-mc37
  3. 2026-10-13 Fix available: RHSA-2026:76430 · Red Hat
  4. 2026-10-13 Fix available: RHSA-2026:80632 · Red Hat
  5. 2026-10-13 Fix available: RHSA-2026:76448 · Red Hat
  6. 2026-10-13 Fix available: RHSA-2026:76677 · Red Hat
  7. 2026-10-13 Fix available: RHSA-2026:80647 · Red Hat
  8. 2026-10-13 Fix available: RHSA-2026:80643 · Red Hat
  9. 2026-10-13 Fix available: RHSA-2026:80651 · Red Hat
  10. 2026-10-13 Fix available: RHSA-2026:80653 · Red Hat
  11. 2026-10-13 Fix available: RHSA-2026:80672 · Red Hat
  12. 2026-10-13 Fix available: RHSA-2026:80654 · Red Hat
  13. 2026-10-13 Fix available: RHSA-2026:80652 · Red Hat
  14. 2026-10-13 Fix available: RHSA-2026:80677 · Red Hat
  15. 2026-10-13 Fix available: RHSA-2026:80676 · Red Hat
  16. 2026-10-13 Fix available: RHSA-2026:80650 · Red Hat
  17. 2026-10-13 Fix available: Red Hat Hardened Images · Red Hat
  18. 2026-10-14 Fix available: RHSA-2026:72489 · Red Hat
  19. 2026-10-14 Fix available: RHSA-2026:72493 · Red Hat
  20. 2026-10-14 Fix available: RHSA-2026:72570 · Red Hat
  21. 2026-10-14 Fix available: RHSA-2026:76876 · Red Hat
  22. 2026-10-14 Fix available: RHSA-2026:72496 · Red Hat
  23. 2026-10-14 Fix available: RHSA-2026:77895 · Red Hat
  24. 2026-10-14 Fix available: RHSA-2026:80634 · Red Hat
  25. 2026-10-14 Fix available: RHSA-2026:80637 · Red Hat
  26. 2026-10-14 Fix available: RHSA-2026:80646 · Red Hat
  27. 2026-10-14 Fix available: RHSA-2026:80649 · Red Hat
  28. 2026-10-14 Fix available: RHSA-2026:80658 · Red Hat
  29. 2026-10-14 Fix available: RHSA-2026:80657 · Red Hat
  30. 2026-10-14 Fix available: RHSA-2026:80656 · Red Hat
  31. 2026-10-14 Fix available: RHSA-2026:80659 · Red Hat
  32. 2026-10-14 Fix available: RHSA-2026:80660 · Red Hat
  33. 2026-10-14 Fix available: RHSA-2026:80661 · Red Hat
  34. 2026-10-14 Fix available: RHSA-2026:80666 · Red Hat
  35. 2026-10-14 Fix available: RHSA-2026:80668 · Red Hat
  36. 2026-10-14 Fix available: RHSA-2026:80673 · Red Hat
  37. 2026-10-14 Fix available: RHSA-2026:80670 · Red Hat
  38. 2026-10-14 Fix available: RHSA-2026:80671 · Red Hat
  39. 2026-10-14 Fix available: RHSA-2026:80686 · Red Hat
  40. 2026-10-14 Fix available: RHSA-2026:80683 · Red Hat
  41. 2026-10-14 Fix available: RHSA-2026:80682 · Red Hat
  42. 2026-10-14 Fix available: RHSA-2026:80693 · Red Hat
  43. 2026-10-29 Affected versions changed · Red Hat
  44. 2026-10-30 Fix available: RHSA-2026:89715 · Red Hat
  45. 2026-10-30 Fix available: Red Hat Ceph Storage 8.0 Tools · Red Hat
  46. 2026-11-03 Affected versions changed · Red Hat

References

Advisory 1

Other 10

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences