RHSA-2024:5258HighCVSS 8.3

Red Hat Security Advisory: container-tools:rhel8 security update

Published
August 13, 2024
Last Modified
June 4, 2026

🔗 CVE IDs covered (9)

📋 Description

CVE-2023-45290 — golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2024-1394 — golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-3727 — containers/image: digest type does not guarantee valid type CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file CVE-2024-24783 — golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24784 — golang: net/mail: comments in display names are incorrectly handled CVE-2024-24789 — golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-37298 — gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization CVE-2024-37891 — urllib3: proxy-authorization request header is not stripped during cross-origin redirects

🔗 References (13)