RHSA-2024:3254HighCVSS 8.6
Red Hat Security Advisory: container-tools:rhel8 security update
🔗 CVE IDs covered (5)
📋 Description
CVE-2022-2880 — golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps CVE-2024-1753 — buildah: full container escape at build time CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-28180 — jose-go: improper handling of highly compressed data
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2024:3254
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2132868
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2132872
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265513
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268046
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268854
- externalhttps://issues.redhat.com/browse/RHEL-26664
- externalhttps://issues.redhat.com/browse/RHEL-28628
- externalhttps://issues.redhat.com/browse/RHEL-30885
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3254.json