drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in Submariner
| Name: |
Denial of Service in Submariner |
|
| ID: |
RHSA-2025:0678 |
|
| Distribution: |
Red Hat |
|
| Plattformen: |
Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 |
|
| Datum: |
Fr, 24. Januar 2025, 06:49 |
|
| Referenzen: |
https://bugzilla.redhat.com/show_bug.cgi?id=2333122
https://access.redhat.com/errata/RHSA-2025:0678
https://access.redhat.com/security/cve/CVE-2024-45338 |
|
| Applikationen: |
Submariner |
|
Originalnachricht |
Submariner 0.16.8 packages that fix various bugs and add various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.9
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Submariner enables direct networking between pods and services on different Kubernetes clusters that are either on-premises or in the cloud.
For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.
This advisory contains bug fixes and enhancements to the Submariner container images.
Security fix(es):
golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2024-45338: Allocation of Resources Without Limits or Throttling (CWE-770)
|
|
|
|