7148 matches found
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update
Red Hat OpenShift Container Platform release 4.15.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update
The components for Red Hat OpenShift for Windows Containers 10.15.0 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this updat...
Low: Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.1.0 operator/operand containers
Red Hat OpenShift distributed tracing 3.1.0 Red Hat Product Security has rated this update as having a security impact of "Low". A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
RHCOS 4 : OpenShift Container Platform 4.14.14 (RHSA-2024:0944)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0944 advisory. - golang.org/x/net/html: Cross site scripting CVE-2023-3978 Note that Nessus has not tested for this issue but has instead relied only on the...
RHEL 8 / 9 : OpenShift Container Platform 4.14.14 (RHSA-2024:0944)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0944 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
RHCOS 4 : OpenShift Container Platform 4.15.0 (RHSA-2023:7201)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7201 advisory. - golang: net/http, x/net/http2: rapid stream resets can cause excessive work CVE-2023-44487 CVE-2023-39325 - golang:...
RHEL 9 : OpenShift Container Platform 4.15.z (RHSA-2023:7200)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7200 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...
Moderate: Red Hat Security Advisory: Network Observability 1.5.0 for OpenShift
Network Observability is an OpenShift operator that deploys a monitoring pipeline to collect and enrich network flows that are produced by the Network Observability eBPF agent. The operator provides dashboards, metrics, and keeps flows accessible in a queryable log store, Grafana Loki. When a...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.12.50 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.13.34 security update
Red Hat OpenShift Container Platform release 4.13.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.12.50 security and extras update
Red Hat OpenShift Container Platform release 4.12.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of...
CVE-2024-26581
A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nftsetrbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active. Mitigation 1. This flaw can be mitigated by...
CVE-2023-52433
A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nftsetrbtree, where new elements in this transaction might expire before the transaction ends. Skip sync GC for such elements, otherwise a commit path might walk over an already released object. Once the...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.13 security update
Red Hat OpenShift Container Platform release 4.14.13 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Critical: Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update
Red Hat OpenShift Serverless 1.31.1 is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...
CVE-2024-1342
Rejected reason: Unable to reproduce...
Cross site request forgery (csrf)
A flaw was found in OpenShift. The existing Cross-Site Request Forgery CSRF protections in place do not properly protect GET requests, allowing for the creation of WebSockets via CSRF...
CVE-2024-1342
OpenShift CSRF flaw (CVE-2024-1342): protections do not properly cover GET requests, enabling creation of WebSockets via CSRF. Affected: Red Hat OpenShift. Root cause: CSRF protection weakness for GET traffic. Impact: potential unauthorized WebSocket creation; no exploit details provided in these...