drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Red Hat OpenShift Data Foundation
| Name: |
Zwei Probleme in Red Hat OpenShift Data Foundation |
|
| ID: |
RHSA-2025:0775 |
|
| Distribution: |
Red Hat |
|
| Plattformen: |
Red Hat RHODF 4.17 for RHEL 9 |
|
| Datum: |
Mi, 29. Januar 2025, 07:35 |
|
| Referenzen: |
https://access.redhat.com/security/cve/CVE-2024-45338
https://issues.redhat.com/browse/DFBUGS-1342
https://access.redhat.com/errata/RHSA-2025:0775
https://bugzilla.redhat.com/show_bug.cgi?id=2333122
https://bugzilla.redhat.com/show_bug.cgi?id=2330689
https://access.redhat.com/security/cve/CVE-2024-52798 |
|
| Applikationen: |
Red Hat OpenShift Data Foundation |
|
Originalnachricht |
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.17.3 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.
Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API.
Security Fix(es) from Bugzilla:
* golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)
* path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x (CVE-2024-52798)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2024-45338: Allocation of Resources Without Limits or Throttling (CWE-770) CVE-2024-52798: Inefficient Regular Expression Complexity (CWE-1333)
|
|
|
|