Skip to content
OpenAdvisories
High RHSA-2024:0489 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.12.48 packages and security update

Published Sep 30, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.12::el8 cri-o 0:1.25.5-6.rhaos4.12.gitfcf6ef3.el8
Red Hat · OpenShift 4 openshift:4.12::el8 cri-o-debuginfo 0:1.25.5-6.rhaos4.12.gitfcf6ef3.el8
Red Hat · OpenShift 4 openshift:4.12::el8 cri-o-debugsource 0:1.25.5-6.rhaos4.12.gitfcf6ef3.el8

Vulnerabilities 1

  • High 7.5
    CVE-2023-47108 Public exploit

    DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

    OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have…

    open-telemetry opentelemetry-go-contrib kubescape k3s Ubuntu Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2251198
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0489.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-47108
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-47108
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-47108
  • article
    https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw