CVE-2024-24786 affecting package kata-containers for versions less than 3.2.0.azl2-1

CVE-2024-24786 affecting package kata-containers for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-39325 affecting package kata-containers for versions less than 3.2.0.azl2-1

CVE-2023-39325 affecting package kata-containers for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

CVE-2023-39325 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1. A patched version of the package is available...

CVE-2023-5678 affecting package kata-containers for versions less than 3.2.0.azl1-1

CVE-2023-5678 affecting package kata-containers for versions less than 3.2.0.azl1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-4807 affecting package kata-containers for versions less than 3.2.0.azl1-1

CVE-2023-4807 affecting package kata-containers for versions less than 3.2.0.azl1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-26964 affecting package kata-containers for versions less than 3.2.0.azl0-2

CVE-2023-26964 affecting package kata-containers for versions less than 3.2.0.azl0-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-22466 affecting package kata-containers for versions less than 3.2.0.azl0-1

CVE-2023-22466 affecting package kata-containers for versions less than 3.2.0.azl0-1. This CVE either no longer is or was never applicable...

AZL-39634 CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-39232 CVE-2023-45288 affecting package kata-containers for versions less than 3.2.0.azl2-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-39625 CVE-2023-45288 affecting package kata-containers for versions less than 3.2.0.azl4-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-39217 CVE-2023-45288 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-35658 CVE-2024-24786 affecting package kata-containers for versions less than 3.2.0.azl4-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35577 CVE-2024-24786 affecting package kata-containers for versions less than 3.2.0.azl2-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35659 CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35578 CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl2-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-39649 CVE-2024-0727 affecting package kata-containers for versions less than 3.2.0.azl1-1

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates...

Moderate: Red Hat Enhancement Advisory: OpenShift sandboxed containers 1.5.0 update

OpenShift sandboxed containers 1.5.0 is now available. OpenShift sandboxed containers support for OpenShift Container Platform provides users with built-in support for running Kata containers as an additional, optional runtime. This advisory contains an update for OpenShift sandboxed containers...

AZL-39659 CVE-2023-5678 affecting package kata-containers for versions less than 3.2.0.azl1-1

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHgeneratekey to generate an X9.42 DH key may experience long delays. Likewise, applications that use...