RHSA-2024:9620: Red Hat OpenShift Security Advisory with DOMPurify Prototype Pollution and QEMU DoS CVEs

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability ID: RHSA-2024:9620 2. Release Date: November 20, 2024 3. Update Date: November 20, 2024 4. Type/Severity: Security Advisory, Important 5. Affected Products: - Red Hat OpenShift Container Platform 4.14.41 - Red Hat OpenShift Container Platform 4.14 - Red Hat OpenShift Container Platform for Power 4.14 - Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 - Red Hat OpenShift Container Platform for ARM 64 4.14 6. Security Issues: - OAuth2 insufficient state parameter entropy (CVE-2024-6508) - QEMU: Denial of service caused by incorrect synchronization during QEMU NBD server socket shutdown (CVE-2024-7409) - DOMPurify: DOMPurify vulnerable to prototype pollution attacks (CVE-2024-47875) - DOMPurify: DOMPurify vulnerable to prototype pollution attacks (CVE-2024-48910) 7. Remediation: - Check for available updates using OpenShift CLI ( ) or the web console. - Use the tool to check release image metadata. - Upgrade the cluster using OpenShift CLI ( ) or the web console. 8. Affected Components: - openshift-console - dompurify - QEMU 9. CVE IDs: - CVE-2019-12900 - CVE-2022-48773 - CVE-2022-48936 - CVE-2023-52492 - CVE-2023-52522 - CVE-2024-3596 - CVE-2024-3652 - CVE-2024-6508 - CVE-2024-7006 - CVE-2024-7409 - CVE-2024-24857 - CVE-2024-26640 - CVE-2024-26656 - CVE-2024-26772 - CVE-2024-26851 - CVE-2024-26870 - CVE-2024-26906 - CVE-2024-26924 - CVE-2024-26976 - CVE-2024-27017 - CVE-2024-27062 - CVE-2024-31076 - CVE-2024-35839 - CVE-2024-35898 - CVE-2024-35939 - CVE-2024-38540 - CVE-2024-38541 - CVE-2024-38586 - CVE-2024-38608 - CVE-2024-39503 - CVE-2024-40924 - CVE-2024-40931 - CVE-2024-40961 - CVE-2024-40983 - CVE-2024-40984 - CVE-2024-41009 - CVE-2024-41039 - CVE-2024-41042 - CVE-2024-41066 - CVE-2024-41092 - CVE-2024-41093 - CVE-2024-42070 - CVE-2024-42244 - CVE-2024-42271 - CVE-2024-42284 - CVE-2024-42292 - CVE-2024-42301 - CVE-2024-43854 - CVE-2024-43880 - CVE-2024-43889 - CVE-2024-43892 - CVE-2024-44935 - CVE-2024-44990 - CVE-2024-45018 - CVE-2024-46826 - CVE-2024-46858 - CVE-2024-47668 - CVE-2024-47875 - CVE-2024-48910 - CVE-2024-49768 - CVE-2024-49769 - CVE-2024-50602 This information helps users understand the details of the vulnerabilities, the affected systems and components, and how to remediate and prevent these issues.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2024:9620: Red Hat OpenShift Security Advisory with DOMPurify Prototype Pollution and QEMU DoS CVEs

More from this source