RHSA-2024:6122HighCVSS 8.3

Red Hat Security Advisory: OpenShift Container Platform 4.18.1 bug fix and security update

Published
February 25, 2025
Last Modified
May 26, 2026

🔗 CVE IDs covered (8)

CVE-2024-45338 →CVE-2024-50311 →CVE-2025-21613 · pendingCVE-2025-21614 · pendingCVE-2024-3727 →CVE-2024-6104 →CVE-2024-12698 →CVE-2024-24786 →

📋 Description

CVE-2024-3727 — containers/image: digest type does not guarantee valid type CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file CVE-2024-12698 — ose-olm-catalogd-container: incomplete fix for rapid reset (CVE-2023-39325/CVE-2023-44487) CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-50311 — GraphQL: Denial of Service (DoS) vulnerability via GraphQL Batching CVE-2025-21613 — go-git: argument injection via the URL field CVE-2025-21614 — go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies

🔗 References (1068)