RHSA-2024:7548MediumCVSS 7.5

Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9

Published
October 16, 2024
Last Modified
August 25, 2026

🔗 CVE IDs covered (5)

CVE-2024-24790 →CVE-2024-24791 →CVE-2023-45290 →CVE-2024-24786 →CVE-2024-24788 →

📋 Description

CVE-2023-45290 — golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-24788 — golang: net: malformed DNS message can cause infinite loop CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses CVE-2024-24791 — net/http: Denial of service due to improper 100-continue handling in net/http

🎯 Affected products4

  • RODOO 1.2 for RHEL 9
  • run-once-duration-override-operator/run-once-duration-override-operator-bundle@sha256:68178c1bdb8ea36faf602d639af290096b40d796aaf8f0e66bff1f6de1ec036a_amd64 as a component of RODOO 1.2 for RHEL 9
  • run-once-duration-override-operator/run-once-duration-override-rhel9-operator@sha256:2921354dbe51a94c750e11621acbbaffa8068780a5c495c749fed0751189c89d_amd64 as a component of RODOO 1.2 for RHEL 9
  • run-once-duration-override-operator/run-once-duration-override-rhel9@sha256:0432f8a46dbe6ef3abd0d164d935bf23ad860b290e885efc58cc75f5c0dfab62_amd64 as a component of RODOO 1.2 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)