Red Hat OpenShift: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.7
  CVE-2024-0793

  Kube-controller-manager: malformed hpa v1 manifest causes crash

  A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.12 argocd-image-updater Wolfi Go
  Nov 17, 2024
• Medium 4.3
  CVE-2023-25165

  getHostByName Function Information Disclosure

  Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in Helm v3. The function is able to accept a hostname and return an IP address for that hostname. To get the IP address the …

  helm helm helm-3 helm-4 Azure Linux Wolfi Go
  Feb 8, 2023

Revision history

1. 2025-07-21 #4

   Neue Updates von SUSE aufgenommen

2. 2024-08-13 #3

   Neue Updates von SUSE aufgenommen

3. 2024-04-08 #2

   Neue Updates von SUSE aufgenommen

4. 2024-03-19 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-03-19
  https://access.redhat.com/errata/RHSA-2024:1265
• Red Hat Security Advisory vom 2024-03-19
  https://access.redhat.com/errata/RHSA-2024:1267
• SUSE Security Update SUSE-SU-2024:1163-1 vom 2024-04-08
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018302.html
• SUSE Security Update SUSE-SU-2024:1166-1 vom 2024-04-08
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018299.html
• SUSE Security Update SUSE-SU-2024:1165-1 vom 2024-04-08
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018300.html
• SUSE Security Update SUSE-SU-2024:1164-1 vom 2024-04-08
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018301.html
• SUSE Security Update SUSE-SU-2024:1166-2 vom 2024-08-13
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019181.html
• SUSE Security Update SUSE-SU-2025:02423-1 vom 2025-07-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CVDW5HPSEFFQUNXWXYMKJCDGJR4W243Q/