Threats Tagged 'cve-2024-28849'

Errata Advisory for Red Hat OpenShift GitOps v1.12.6. Security Fix(es): * openshift-gitops-argocd-container: openshift-gitops-argocd-container: Denial of Service Vulnerability in body-parser [gitops-1.12](CVE-2024-45590) * openshift-gitops-console-plugin-container: follow-redirects: Possible credential leak [gitops-1.12](CVE-2024-28849) * openshift-gitops-dex-container: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [gitops-1.12](CVE-2024-24786) * openshift-gitops-argocd-container: go-retryablehttp: url might write sensitive information to log file [gitops-1.12](CVE-2024-6104) * openshift-gitops-argocd-container: Improper Sanitization in serve-static [gitops-1.12](CVE-2024-43800) * openshift-gitops-argocd-container: Improper Input Handling in Express Redirects [gitops-1.12](CVE-2024-43796) * openshift-gitops-argocd-container: Code Execution Vulnerability in Send Library [gitops-1.12](CVE-2024-43799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.14.7 images.

Release of RHACS 4.5 provides these changes: New features: * Scanner V4 is generally available * Vulnerability Management 2.0 is generally available * Compliance updates * Built-in email notifier in RHACS Cloud Service * roxctl installation GitHub action * Bring your own PKI for signature verification * Build-time network policy tools updates * Enhanced RHACS Cloud Service experience This releases updates the following items to patch vulnerabilities: * (CVE-2024-28849) The `follow-redirect` module was updated to 1.15.6. * (CVE-2024-29903) Updated `cosign` to 2.2.4. * (CVE-2024-29902) Updated `cosign` to 2.2.4. For more information on new features and other details, see https://docs.openshift.com/acs/4.5/release_notes/45-release-notes.html.

Red Hat Advanced Cluster Management for Kubernetes 2.10.2 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fixes several bugs. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html/release_notes/ Jira issues addressed: - ACM-10406: Observability - remove or update addonDeploymentConfig from the clusterManagementAddon is not effect - ACM-10806: Observability - local-cluster CPU utilization and overestimation data are not display on the Grafana - ACM-10811: Observability Endpoint in the Hub doesn't reconcile updates to Observability Addon Spec - ACM-10967: Endless dockercfg secret creation in MCO - ACM-11008: ACM 2.10 CSV documentation link references v2.9.0 documentation link - ACM-11071: Observability - Endpoint SA does not get created again in the hub after deletion