RHSA-2024:4520: Important: Migration Toolkit for Containers (MTC) 1.7.16 security and bug fix update
The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.Security Fix(es) from Bugzilla: webpack-dev-middleware: lack of URL validation may lead to file leak (CVE-2024-29180) golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290) golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783) golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784) golang: html/template: errors returned from MarshalJSON methods may break template escaping (CVE-2024-24785) envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood (CVE-2024-30255) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Migration Toolkit for Containers (MTC)to a version that resolves this vulnerability.Fixed in 1.7.16
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:4520?
The severity of RHSA-2024:4520 is rated as a moderate security vulnerability.
How do I fix RHSA-2024:4520?
To fix RHSA-2024:4520, update the Migration Toolkit for Containers to the latest version provided by Red Hat.
What software does RHSA-2024:4520 affect?
RHSA-2024:4520 affects the Red Hat Migration Toolkit for Containers.
What type of issues does RHSA-2024:4520 address?
RHSA-2024:4520 addresses security vulnerabilities that impact the Migration Toolkit for Containers.
When was RHSA-2024:4520 released?
RHSA-2024:4520 was released in 2024 as a security advisory from Red Hat.