Red Hat OpenShift 4.15 Security Update (RHSA-2024:8425) Fixes Multiple CVEs

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: RHSA-2024:8425 2. Release Date: October 31, 2024 3. Affected Product: Red Hat OpenShift Container Platform 4.15 4. Type/Severity: Security update, Important 5. Description: Red Hat OpenShift Container Platform 4.15.37 has been released, including updates that fix multiple bugs and add enhancements. Red Hat Product Security has rated the severity of this update as Important. 6. Security Fixes: - : gobang: Calling on a message containing deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156) - : : : FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341) - : : : symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (CVE-2024-9676) - : gobang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) - : gobang: Calling on a build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) 7. Solution: All users of Red Hat OpenShift Container Platform 4.15 are advised to upgrade to this version to apply the fixed packages and images. 8. Affected Products List: - Red Hat OpenShift Container Platform 4.15 for RHEL 9 x86_64 - Red Hat OpenShift Container Platform 4.15 for RHEL 8 x86_64 - Red Hat OpenShift Container Platform for Power 4.15 for RHEL 9 ppc64le - Red Hat OpenShift Container Platform for Power 4.15 for RHEL 8 ppc64le - Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 9 s390x - Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 8 s390x - Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 9 aarch64 - Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 8 aarch64 9. CVE IDs: - CVE-2024-9341 - CVE-2024-9676 - CVE-2024-34155 - CVE-2024-34156 - CVE-2024-34158 This information provides detailed descriptions of the vulnerabilities, affected products, security fixes, and recommended solutions.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat OpenShift 4.15 Security Update (RHSA-2024:8425) Fixes Multiple CVEs