Red Hat Security Advisory: OpenShift Container Platform 4.16.z security update

Fixed packages 8

Vulnerabilities 3

• Critical 9.8
  CVE-2024-24790

  Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

  The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

  Go standard library net/netip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 5, 2024
• Medium 6.5
  CVE-2024-9676

  Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

  A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an au…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9.4 Extended Update Support Linux Debian Ubuntu Azure Linux Alpine
  Oct 15, 2024
• Medium 6.2
  CVE-2024-5569

  Denial of Service via crafted zip file in jaraco/zipp

  A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile …

  jaraco jaraco/zipp kubeflow-pipelines-apiserver tensorflow Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jul 9, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292787
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2296413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2317467
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8418.json
• report
  https://access.redhat.com/security/cve/CVE-2024-5569
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-5569
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-5569
• article
  https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd
• article
  https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae
• report
  https://access.redhat.com/security/cve/CVE-2024-9676
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-9676
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-9676
• advisory
  https://github.com/advisories/GHSA-wq2p-5pc6-wpgf
• article
  https://github.com/containers/storage/commit/935c58f4b3e364a9c9d33ed06476a831e6ad5679
• report
  https://access.redhat.com/security/cve/CVE-2024-24790
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-24790
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-24790