Skip to content
OpenAdvisories
Medium RHSA-2023:1408 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.12.9 packages and security update

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.12::el8 conmon-rs 0:0.5.1-3.rhaos4.12.git.el8
Red Hat · OpenShift 4 openshift:4.12::el9 conmon-rs 0:0.5.1-3.rhaos4.12.git.el9

Vulnerabilities 1

  • Medium 5.4
    CVE-2022-46149

    Cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.

    Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out…

    capnproto capnproto capnproto capnproto Debian Ubuntu crates.io

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2150074
  • article
    https://issues.redhat.com/browse/OCPBUGS-9977
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1408.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-46149
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-46149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-46149
  • article
    https://github.com/capnproto/capnproto/commit/25d34c67863fd960af34fc4f82a7ca3362ee74b9
  • article
    https://github.com/capnproto/capnproto/security/advisories/GHSA-qqff-4vw4-f6hx