Threats Tagged 'cve-2024-25620'

Red Hat OpenShift Container Platform 4. 15. 3 includes a security update addressing a path traversal vulnerability in Helm's dependency management (CVE-2024-25620). This vulnerability is rated as moderate severity by Red Hat Product Security. The update also contains various bug fixes and enhancements. Users of OpenShift Container Platform 4. 15 are advised to upgrade to the updated packages and container images available through the appropriate release channels. Detailed upgrade instructions are provided by Red Hat. No known exploits are reported in the wild at this time.

The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fix(es): * Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155) * Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158) * encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)