- Vulnerability/
- RHSA-2024:5054
RHSA-2024:5054: Important: OpenShift Virtualization 4.16.1 Images security update
First published: Tue Aug 06 2024(Updated: )
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.<br>This advisory contains OpenShift Virtualization 4.16.1 images.<br>Security Fix(es):<br><li> fast-xml-parser: ReDOS at currency parsing in currency.js (CVE-2024-41818)</li> <li> golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat OpenShift Virtualization |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046
- https://bugzilla.redhat.com/show_bug.cgi?id=2300499
- https://issues.redhat.com/browse/CNV-44478
- https://issues.redhat.com/browse/CNV-43206
- https://issues.redhat.com/browse/CNV-42700
- https://issues.redhat.com/browse/CNV-42508
- https://issues.redhat.com/browse/CNV-42482
- https://issues.redhat.com/browse/CNV-42365
- https://issues.redhat.com/browse/CNV-42223
- https://issues.redhat.com/browse/CNV-42128
- https://issues.redhat.com/browse/CNV-41962
- https://issues.redhat.com/browse/CNV-41948
- https://issues.redhat.com/browse/CNV-41538
- https://issues.redhat.com/browse/CNV-41081
- https://issues.redhat.com/browse/CNV-39739
- https://issues.redhat.com/browse/CNV-36845
- https://issues.redhat.com/browse/CNV-23540
- https://issues.redhat.com/browse/CNV-42157
- https://issues.redhat.com/browse/CNV-44592
- https://issues.redhat.com/browse/CNV-44506
- https://issues.redhat.com/browse/CNV-43209
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/errata/RHSA-2024:5054 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2024:5054?
The severity of RHSA-2024:5054 is categorized as moderate due to the identified vulnerabilities.
How do I fix RHSA-2024:5054?
To fix RHSA-2024:5054, upgrade to OpenShift Virtualization version 4.16.1 or later.
Which component is affected by RHSA-2024:5054?
RHSA-2024:5054 affects the fast-xml-parser component used in OpenShift Virtualization.
What vulnerability does RHSA-2024:5054 address?
RHSA-2024:5054 addresses a Regular Expression Denial of Service (ReDOS) vulnerability in fast-xml-parser (CVE-2024-41818).
Is there a public exploit for RHSA-2024:5054?
As of now, there is no publicly known exploit specifically targeting the vulnerabilities addressed in RHSA-2024:5054.
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2024:5054
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat openshift virtualization