RHSA-2024:2865HighCVSS 7.5
Red Hat Security Advisory: OpenShift Container Platform 4.15.14 bug fix and security update
🔗 CVE IDs covered (5)
📋 Description
CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-47108 — opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics CVE-2024-25620 — helm: Dependency management path traversal CVE-2024-26147 — helm: Missing YAML Content Leads To Panic CVE-2024-28180 — jose-go: improper handling of highly compressed data
🔗 References (30)
- selfhttps://access.redhat.com/errata/RHSA-2024:2865
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2251198
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2264336
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265440
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268273
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268854
- externalhttps://issues.redhat.com/browse/OCPBUGS-18534
- externalhttps://issues.redhat.com/browse/OCPBUGS-20024
- externalhttps://issues.redhat.com/browse/OCPBUGS-20152
- externalhttps://issues.redhat.com/browse/OCPBUGS-23022
- externalhttps://issues.redhat.com/browse/OCPBUGS-27852
- externalhttps://issues.redhat.com/browse/OCPBUGS-29316
- externalhttps://issues.redhat.com/browse/OCPBUGS-29613
- externalhttps://issues.redhat.com/browse/OCPBUGS-30117
- externalhttps://issues.redhat.com/browse/OCPBUGS-32187
- externalhttps://issues.redhat.com/browse/OCPBUGS-32426
- externalhttps://issues.redhat.com/browse/OCPBUGS-32481
- externalhttps://issues.redhat.com/browse/OCPBUGS-32497
- externalhttps://issues.redhat.com/browse/OCPBUGS-32505
- externalhttps://issues.redhat.com/browse/OCPBUGS-33058
- externalhttps://issues.redhat.com/browse/OCPBUGS-33127
- externalhttps://issues.redhat.com/browse/OCPBUGS-33191
- externalhttps://issues.redhat.com/browse/OCPBUGS-33250
- externalhttps://issues.redhat.com/browse/OCPBUGS-33341
- externalhttps://issues.redhat.com/browse/OCPBUGS-33466
- externalhttps://issues.redhat.com/browse/OCPBUGS-33512
- externalhttps://issues.redhat.com/browse/OCPBUGS-33541
- externalhttps://issues.redhat.com/browse/OCPBUGS-33548
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2865.json