This advisory covers security fixes in Red Hat OpenShift Container Platform 4.17.5 for three libexpat vulnerabilities: CVE-2024-45490 (negative length parsing vulnerability), CVE-2024-45491 (integer overflow or wraparound), and CVE-2024-45492 (integer overflow). These issues affect the libexpat XML parsing library used within OpenShift container images and packages. The advisory includes updated container images and RPM packages to remediate these vulnerabilities. Red Hat rates the security impact as moderate and recommends upgrading to the fixed versions available in the appropriate release channels. The advisory references detailed release notes and upgrade documentation for cluster administrators.

The vulnerabilities affect the libexpat library used in OpenShift Container Platform 4.17, potentially allowing issues related to negative length parsing and integer overflows. Red Hat rates the impact as moderate, indicating these flaws could lead to security issues but are not classified as critical or high severity. No known exploits in the wild have been reported at this time.

Red Hat has released updated container images and RPM packages for OpenShift Container Platform 4.17.5 that fix the libexpat vulnerabilities. Users of OpenShift 4.17 are advised to upgrade to these updated packages and images as soon as they are available in their release channels. Upgrades can be performed using the OpenShift CLI (oc) or web console following Red Hat's official cluster update instructions. No additional mitigation steps are indicated beyond applying the official update.