This advisory covers multiple security issues fixed in Red Hat OpenShift Container Platform 4.17.2. Notably, CVE-2024-28180 involves improper handling of highly compressed data in the jose-go library, which could lead to security issues. Other vulnerabilities include stack exhaustion panics in Go language components: encoding/gob Decoder.Decode on deeply nested messages (CVE-2024-34156), go/parser Parse functions with deeply nested literals (CVE-2024-34155), and go/build/constraint Parse on deeply nested build tag expressions (CVE-2024-34158). Additionally, CVE-2024-47211 addresses a lack of checksum validation on OpenStack Ironic images. These issues could cause denial of service or other impacts related to processing malformed inputs. The advisory does not provide CVSS scores but rates the update as important.

The vulnerabilities fixed in this update primarily involve denial of service conditions caused by stack exhaustion panics when processing deeply nested or highly compressed data structures. The lack of checksum validation on OpenStack Ironic images could allow corrupted or tampered images to be accepted, potentially impacting system integrity. No known exploits in the wild have been reported at this time. The overall security impact is rated as important by Red Hat Product Security.

Red Hat OpenShift Container Platform users running versions >=4.17.0 and <4.17.2 should upgrade to version 4.17.2, which contains fixes for these vulnerabilities. The vendor manages remediation through updated packages and images available via the appropriate release channels. Users should follow the official upgrade instructions provided by Red Hat at https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html. No additional mitigations are indicated beyond applying the update.