RHSA-2024:8991: Red Hat OpenShift/RHEL Security Advisory with Multiple CVE Fixes

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability ID: RHSA-2024:8991 2. Release Date: November 13, 2024 3. Update Date: November 13, 2024 4. Type/Severity: Security Advisory, Important 5. Affected Products: - Red Hat OpenShift Container Platform 4.15 - RHEL 9 x86_64 - RHEL 8 x86_64 - RHEL 9 s390x - RHEL 8 s390x - RHEL 9 ppc64le - RHEL 8 ppc64le - RHEL 9 aarch64 - RHEL 8 aarch64 6. Security Issues: - OAuth2 insufficient state parameter entropy (CVE-2024-6508) - DoS vulnerability in otelhttp (CVE-2023-45142) - Denial of Service via Improper Synchronization in QEMU NBD Server (CVE-2024-7409) - Nesting-based mutation XSS vulnerability (CVE-2024-47875) 7. Solutions: - Use OpenShift CLI ( ) or web console to check for available updates. - Use tool to check release image metadata. - Upgrade the cluster using OpenShift CLI ( ) or web console. 8. Affected Components: - openshift-console - dompurify - opentelemetry - QEMU 9. CVE IDs: - CVE-2019-12900 - CVE-2022-48773 - CVE-2022-48936 - CVE-2023-45142 - CVE-2023-52492 - CVE-2024-2314 - CVE-2024-3596 - CVE-2024-6508 - CVE-2024-7006 - CVE-2024-7409 - CVE-2024-9341 - CVE-2024-9675 - CVE-2024-9676 - CVE-2024-24857 - CVE-2024-26851 - CVE-2024-26924 - CVE-2024-26976 - CVE-2024-27017 - CVE-2024-34155 - CVE-2024-34158 - CVE-2024-35839 - CVE-2024-35898 - CVE-2024-35939 - CVE-2024-38540 - CVE-2024-38541 - CVE-2024-38586 - CVE-2024-38608 - CVE-2024-39503 - CVE-2024-40924 - CVE-2024-40961 - CVE-2024-40983 - CVE-2024-40984 - CVE-2024-41009 - CVE-2024-41042 - CVE-2024-41066 - CVE-2024-41092 - CVE-2024-41093 - CVE-2024-42070 - CVE-2024-42079 - CVE-2024-42244 - CVE-2024-42284 - CVE-2024-42292 - CVE-2024-42301 - CVE-2024-43854 - CVE-2024-43880 - CVE-2024-43889 - CVE-2024-43892 - CVE-2024-44935 - CVE-2024-44989 - CVE-2024-44990 - CVE-2024-45018 - CVE-2024-46826 - CVE-2024-47668 - CVE-2024-47875 This information helps users understand the details of the vulnerabilities, affected products and components, and how to resolve and mitigate these issues.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2024:8991: Red Hat OpenShift/RHEL Security Advisory with Multiple CVE Fixes

More from this source