Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
OpenShift Container Platform: Unpatched Security Flaw Exposes Data to Unauthorized Access
published 2 years ago
Summary
An unpatched security issue in OpenShift Container Platform 4.14.19 may allow attackers to access sensitive data. This issue affects users who have not updated their OpenShift Container Platform to the latest version. To protect your system, update to the latest version of OpenShift Container Platform as soon as possible.
What to do
- Update redhat butane to version 0:0.19.0-1.3.rhaos4.14.el8.
- Update redhat butane-debuginfo to version 0:0.19.0-1.3.rhaos4.14.el8.
- Update redhat butane-debugsource to version 0:0.19.0-1.3.rhaos4.14.el8.
- Update redhat butane-redistributable to version 0:0.19.0-1.3.rhaos4.14.el8.
- Update redhat containernetworking-plugins to version 1:1.4.0-1.2.rhaos4.14.el8.
- Update redhat containernetworking-plugins-debuginfo to version 1:1.4.0-1.2.rhaos4.14.el8.
- Update redhat containernetworking-plugins-debugsource to version 1:1.4.0-1.2.rhaos4.14.el8.
- Update redhat cri-o to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8.
- Update redhat cri-o-debuginfo to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8.
- Update redhat cri-o-debugsource to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8.
- Update redhat cri-tools to version 0:1.27.0-3.1.el8.
- Update redhat cri-tools-debuginfo to version 0:1.27.0-3.1.el8.
- Update redhat cri-tools-debugsource to version 0:1.27.0-3.1.el8.
- Update redhat openshift-clients to version 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8.
- Update redhat openshift-clients-redistributable to version 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8.
- Update redhat ose-aws-ecr-image-credential-provider to version 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8.
- Update redhat podman to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-catatonit to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-catatonit-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-debugsource to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-docker to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-gvproxy to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-gvproxy-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-plugins to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-plugins-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-remote to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-remote-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat podman-tests to version 3:4.4.1-11.3.rhaos4.14.el8.
- Update redhat skopeo to version 2:1.11.2-10.3.rhaos4.14.el8.
- Update redhat skopeo-debuginfo to version 2:1.11.2-10.3.rhaos4.14.el8.
- Update redhat skopeo-debugsource to version 2:1.11.2-10.3.rhaos4.14.el8.
- Update redhat skopeo-tests to version 2:1.11.2-10.3.rhaos4.14.el8.
- Update redhat cri-o to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9.
- Update redhat cri-o-debuginfo to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9.
- Update redhat cri-o-debugsource to version 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9.
- Update redhat cri-tools to version 0:1.27.0-3.1.el9.
- Update redhat cri-tools-debuginfo to version 0:1.27.0-3.1.el9.
- Update redhat cri-tools-debugsource to version 0:1.27.0-3.1.el9.
- Update redhat ignition to version 0:2.16.2-2.1.rhaos4.14.el9.
- Update redhat ignition-debuginfo to version 0:2.16.2-2.1.rhaos4.14.el9.
- Update redhat ignition-debugsource to version 0:2.16.2-2.1.rhaos4.14.el9.
- Update redhat ignition-validate to version 0:2.16.2-2.1.rhaos4.14.el9.
- Update redhat ignition-validate-debuginfo to version 0:2.16.2-2.1.rhaos4.14.el9.
- Update redhat openshift-clients to version 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9.
- Update redhat openshift-clients-redistributable to version 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9.
- Update redhat ose-aws-ecr-image-credential-provider to version 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9.
- Update redhat podman to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-debugsource to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-docker to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-gvproxy to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-gvproxy-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-plugins to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-plugins-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-remote to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-remote-debuginfo to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat podman-tests to version 3:4.4.1-11.3.rhaos4.14.el9.
- Update redhat skopeo to version 2:1.11.2-10.3.rhaos4.14.el9.
- Update redhat skopeo-debuginfo to version 2:1.11.2-10.3.rhaos4.14.el9.
- Update redhat skopeo-debugsource to version 2:1.11.2-10.3.rhaos4.14.el9.
- Update redhat skopeo-tests to version 2:1.11.2-10.3.rhaos4.14.el9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:openshift:4.14::el8 | redhat | butane |
< 0:0.19.0-1.3.rhaos4.14.el8 Fix: upgrade to 0:0.19.0-1.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | butane-debuginfo |
< 0:0.19.0-1.3.rhaos4.14.el8 Fix: upgrade to 0:0.19.0-1.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | butane-debugsource |
< 0:0.19.0-1.3.rhaos4.14.el8 Fix: upgrade to 0:0.19.0-1.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | butane-redistributable |
< 0:0.19.0-1.3.rhaos4.14.el8 Fix: upgrade to 0:0.19.0-1.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | containernetworking-plugins |
< 1:1.4.0-1.2.rhaos4.14.el8 Fix: upgrade to 1:1.4.0-1.2.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | containernetworking-plugins-debuginfo |
< 1:1.4.0-1.2.rhaos4.14.el8 Fix: upgrade to 1:1.4.0-1.2.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | containernetworking-plugins-debugsource |
< 1:1.4.0-1.2.rhaos4.14.el8 Fix: upgrade to 1:1.4.0-1.2.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-o |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-o-debuginfo |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-o-debugsource |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-tools |
< 0:1.27.0-3.1.el8 Fix: upgrade to 0:1.27.0-3.1.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-tools-debuginfo |
< 0:1.27.0-3.1.el8 Fix: upgrade to 0:1.27.0-3.1.el8
|
| Red Hat:openshift:4.14::el8 | redhat | cri-tools-debugsource |
< 0:1.27.0-3.1.el8 Fix: upgrade to 0:1.27.0-3.1.el8
|
| Red Hat:openshift:4.14::el8 | redhat | openshift-clients |
< 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8 Fix: upgrade to 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8
|
| Red Hat:openshift:4.14::el8 | redhat | openshift-clients-redistributable |
< 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8 Fix: upgrade to 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8
|
| Red Hat:openshift:4.14::el8 | redhat | ose-aws-ecr-image-credential-provider |
< 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8 Fix: upgrade to 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-catatonit |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-catatonit-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-debugsource |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-docker |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-gvproxy |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-gvproxy-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-plugins |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-plugins-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-remote |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-remote-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | podman-tests |
< 3:4.4.1-11.3.rhaos4.14.el8 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | skopeo |
< 2:1.11.2-10.3.rhaos4.14.el8 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | skopeo-debuginfo |
< 2:1.11.2-10.3.rhaos4.14.el8 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | skopeo-debugsource |
< 2:1.11.2-10.3.rhaos4.14.el8 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el8 | redhat | skopeo-tests |
< 2:1.11.2-10.3.rhaos4.14.el8 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el8
|
| Red Hat:openshift:4.14::el9 | redhat | cri-o |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9
|
| Red Hat:openshift:4.14::el9 | redhat | cri-o-debuginfo |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9
|
| Red Hat:openshift:4.14::el9 | redhat | cri-o-debugsource |
< 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9 Fix: upgrade to 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9
|
| Red Hat:openshift:4.14::el9 | redhat | cri-tools |
< 0:1.27.0-3.1.el9 Fix: upgrade to 0:1.27.0-3.1.el9
|
| Red Hat:openshift:4.14::el9 | redhat | cri-tools-debuginfo |
< 0:1.27.0-3.1.el9 Fix: upgrade to 0:1.27.0-3.1.el9
|
| Red Hat:openshift:4.14::el9 | redhat | cri-tools-debugsource |
< 0:1.27.0-3.1.el9 Fix: upgrade to 0:1.27.0-3.1.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ignition |
< 0:2.16.2-2.1.rhaos4.14.el9 Fix: upgrade to 0:2.16.2-2.1.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ignition-debuginfo |
< 0:2.16.2-2.1.rhaos4.14.el9 Fix: upgrade to 0:2.16.2-2.1.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ignition-debugsource |
< 0:2.16.2-2.1.rhaos4.14.el9 Fix: upgrade to 0:2.16.2-2.1.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ignition-validate |
< 0:2.16.2-2.1.rhaos4.14.el9 Fix: upgrade to 0:2.16.2-2.1.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ignition-validate-debuginfo |
< 0:2.16.2-2.1.rhaos4.14.el9 Fix: upgrade to 0:2.16.2-2.1.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | openshift-clients |
< 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9 Fix: upgrade to 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9
|
| Red Hat:openshift:4.14::el9 | redhat | openshift-clients-redistributable |
< 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9 Fix: upgrade to 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9
|
| Red Hat:openshift:4.14::el9 | redhat | ose-aws-ecr-image-credential-provider |
< 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9 Fix: upgrade to 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-debugsource |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
Showing 50 of 62. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:openshift:4.14::el9 | redhat | podman-docker |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-gvproxy |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-gvproxy-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-plugins |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-plugins-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-remote |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-remote-debuginfo |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | podman-tests |
< 3:4.4.1-11.3.rhaos4.14.el9 Fix: upgrade to 3:4.4.1-11.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | skopeo |
< 2:1.11.2-10.3.rhaos4.14.el9 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | skopeo-debuginfo |
< 2:1.11.2-10.3.rhaos4.14.el9 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | skopeo-debugsource |
< 2:1.11.2-10.3.rhaos4.14.el9 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el9
|
| Red Hat:openshift:4.14::el9 | redhat | skopeo-tests |
< 2:1.11.2-10.3.rhaos4.14.el9 Fix: upgrade to 2:1.11.2-10.3.rhaos4.14.el9
|
Original advisory text
Red Hat Security Advisory: OpenShift Container Platform 4.14.19 security update
References
- https://access.redhat.com/errata/RHSA-2024:1567 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2262921 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268854 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1567.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-1394 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-1394 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-1394 Vendor Advisory
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850... Third Party Advisory
- https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6 Third Party Advisory
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77... Third Party Advisory
- https://pkg.go.dev/vuln/GO-2024-2660 Vendor Advisory
- https://vuln.go.dev/ID/GO-2024-2660.json Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-28180 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-28180 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-28180 Vendor Advisory
- https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published2 Oct 2024
Updated22 Mar 2026
First seen22 Mar 2026
Sources
RHSA-2024:1567 · OSV
Track software like this
Free during beta