This Red Hat security advisory covers OpenShift Container Platform 4.15.46, which addresses three security vulnerabilities: CVE-2024-21626 (a file descriptor leak in runc), CVE-2024-45338 (non-linear parsing of case-insensitive content in golang.org/x/net/html), and CVE-2024-53104 (kernel media uvcvideo driver skipping parsing of undefined frame types). The advisory provides updated container images and references RPM package updates. The vulnerabilities impact OpenShift Container Platform 4.15 versions from 4.15.0 up to but not including 4.15.46. Red Hat rates the security impact as Important and recommends upgrading to the fixed version. Detailed upgrade instructions and image digests for multiple architectures are provided. No CVSS scores are included in the advisory, and no known active exploits have been reported.

The vulnerabilities fixed in this update could lead to resource leaks (file descriptor leak), potential parsing issues that might affect processing of HTML content, and improper handling of undefined video frame types in the kernel media driver. These issues could affect the stability or security posture of OpenShift Container Platform deployments. The advisory classifies the overall impact as Important (high severity). No active exploitation has been reported.

Red Hat has released OpenShift Container Platform 4.15.46 containing fixes for these vulnerabilities. Users should upgrade to version 4.15.46 using the OpenShift CLI (oc) or web console as soon as the update is available in their release channel. Detailed upgrade instructions are available at Red Hat's official documentation. No additional mitigations are indicated or required beyond applying this update.