RHSA-2024:9960HighCVSS 8.3

Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.4 security and bug fix update

Published
November 19, 2024
Last Modified
August 21, 2026

🔗 CVE IDs covered (5)

CVE-2024-34156 →CVE-2024-34158 →CVE-2024-3727 →CVE-2024-24791 →CVE-2024-34155 →

📋 Description

CVE-2024-3727 — containers/image: digest type does not guarantee valid type CVE-2024-24791 — net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-34155 — go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion CVE-2024-34156 — encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34158 — go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

🎯 Affected products45

  • 9Base-OADP-1.3
  • oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64 as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x as a component of 9Base-OADP-1.3
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le as a component of 9Base-OADP-1.3
  • +15 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (17)