RHSA-2024:1763
RHSA-2024:1763 · Red Hat Security Advisory: OpenShift Container Platform 4.13.40 packages and security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: OpenShift Container Platform 4.13.40 packages and security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
buildah Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-2.2.rhaos4.13.el8
Update to 1:1.29.1-2.2.rhaos4.13.el8
buildah-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-2.2.rhaos4.13.el8
Update to 1:1.29.1-2.2.rhaos4.13.el8
buildah-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-2.2.rhaos4.13.el8
Update to 1:1.29.1-2.2.rhaos4.13.el8
buildah-tests Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-2.2.rhaos4.13.el8
Update to 1:1.29.1-2.2.rhaos4.13.el8
buildah-tests-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-2.2.rhaos4.13.el8
Update to 1:1.29.1-2.2.rhaos4.13.el8
containernetworking-plugins Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.4.0-1.1.rhaos4.13.el8
Update to 1:1.4.0-1.1.rhaos4.13.el8
containernetworking-plugins-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.4.0-1.1.rhaos4.13.el8
Update to 1:1.4.0-1.1.rhaos4.13.el8
containernetworking-plugins-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 1:1.4.0-1.1.rhaos4.13.el8
Update to 1:1.4.0-1.1.rhaos4.13.el8
cri-o Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
Update to 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
cri-o-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
Update to 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
cri-o-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
Update to 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8
cri-tools Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-4.1.el8
Update to 0:1.26.0-4.1.el8
cri-tools-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-4.1.el8
Update to 0:1.26.0-4.1.el8
cri-tools-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-4.1.el8
Update to 0:1.26.0-4.1.el8
openshift-clients Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8
Update to 0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8
openshift-clients-redistributable Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8
Update to 0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8
podman Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-catatonit Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-catatonit-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-docker Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-gvproxy Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
podman-gvproxy-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:4.4.1-5.2.rhaos4.13.el8
Update to 3:4.4.1-5.2.rhaos4.13.el8
Original sources
- https://access.redhat.com/errata/RHSA-2024:1763
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2262921
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1763.json
- https://access.redhat.com/security/cve/CVE-2024-1394
- https://www.cve.org/CVERecord?id=CVE-2024-1394
- https://nvd.nist.gov/vuln/detail/CVE-2024-1394
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
- https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
- https://pkg.go.dev/vuln/GO-2024-2660
- https://vuln.go.dev/ID/GO-2024-2660.json
- https://osv.dev/vulnerability/RHSA-2024:1763