RHSA-2024:2666MediumCVSS 5.9

Red Hat Security Advisory: OpenShift Container Platform 4.14.24 security and extras update

Published
May 9, 2024
Last Modified
July 31, 2026

🔗 CVE IDs covered (1)

CVE-2024-24786 →

📋 Description

CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

🎯 Affected products157

  • Red Hat OpenShift Container Platform 4.14
  • openshift4/cloud-event-proxy-rhel8@sha256:838383b04e5c11a5261c2f2721cff303d5d21746591cb8e476eaa80a77a48a5d_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/cloud-event-proxy-rhel8@sha256:94ece8fc60889544ccf1d1fad66436f7b5c7fe918737c5e4b8cd7a23aaa82cbd_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/cloud-event-proxy-rhel8@sha256:ee9012d88abfae862e742a7ed1c3bb5f1345511eaec0b2c03d43ffcdada227cf_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/frr-rhel9@sha256:0220e5bbd7160ede7064134cdbda57a04c435386db3b9514d68c826a7ae5e707_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/frr-rhel9@sha256:5d861b0953897f40dea94e7cf86d782d1a76f41026ea5b240d76819c84734edb_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/frr-rhel9@sha256:6a60d104556f24d9f498369c82a91c279d80d51851512425f6625147e1bf53db_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/frr-rhel9@sha256:752d010d3e5caf24febcc0408edb39c717af8c95c2b9e1a6efd17c7e2b9415a8_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:2857936a9dbb5f46efbfe19f7b62b00bd48832838fbd007dd58d76f17bb77406_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:580ab9271a8dc5820a9cbeff8df1409ef4fc04df0e22d502980c4ea1a64851e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:7c55a6e803bbf47309b8c66a4ccf2af0c29d9a2fe4fe62af748172e58e0ed7bf_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:cb663803c205cc9e3cb56cb116ff079c1909f112e1c21c1763732ec2a9edb578_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:0a158630ab57d5049c7b39e44424318bcdeb96bd0f47cb05cba1a09c50ec905a_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:5ed6dcdc71f64bef769b683b96001ede962ba0f8f09ac5eba644b5996a2bf627_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:7a6edf55f94120a7d30b01f6fe55cd9d88d08c20db772f66d70776190eebe1f2_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:d9abee5530486ac92e812aa82b16bad60d3fecfadfe1b09734934f8516ef00f2_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/metallb-rhel9-operator@sha256:3aff334383d5f3faa9d2636c6ebb19d8477092fc70072196d10358ed4b1d8bc6_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/metallb-rhel9-operator@sha256:412ef30a44bf51f1174b6344fbb7afd145d4466fb9917a72390dce3b97070e46_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/metallb-rhel9-operator@sha256:76af0fb05dbffecd3411f4986cf58dd27a61f3a41b3ab4424deb3806712acb3c_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/metallb-rhel9-operator@sha256:fc22c4763b321dcb6e648d26092eb3ef4085b9f98bfbc3c36ebf6eb94c3a0483_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/nmstate-console-plugin-rhel8@sha256:39d0ccae0273faaa9f05c7ba931effa9d1e0376cc30ce020728fd1b473de07da_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/nmstate-console-plugin-rhel8@sha256:6fcdf8f95b553e227e0dfff15fdd0185a6a17c6dcf3a0c58ad4a070c53b76636_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/nmstate-console-plugin-rhel8@sha256:cc4e6820c6b65b6ff14ffb3d482546630c822ca9e7534b6fda13f2fd353e03f1_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/nmstate-console-plugin-rhel8@sha256:d0e605e2d9f9275fe178d0588d28759e37aba8fb4bc6d3cf2dd859e271bd9bae_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-ansible-operator@sha256:02f92faaba07fb32d11b93f7d6886f255d0415d633e277ec9209ea401edde09c_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-ansible-operator@sha256:6c919b58d9c90bfe52f3fbd028d02e78df6f13b3b3348a24b6e098f0fc4123ec_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-ansible-operator@sha256:b856417ea695e8c4e1c48c6c147adc4a8b6e86d849086303fc00fb72605940e9_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-ansible-operator@sha256:cd7a5ac8a9afefa57dcc56a698d4f3706d492dbc0bcb6679238be72594eaaca0_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:a2ce93b1f5548131dafadcf30d0d9363f93ff0c6ca1838993e94b780b7d064b7_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:bc0d09bd14e833ddce4aad6979b6e5edcfb5d6d13114adf88c34edebf347fe80_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • +127 more not shown

✅ Remediation

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)