Red Hat OpenShift 4.13 安全公告 (RHSA-2024:8690) 含多个 CVE

从这个网页截图中，可以获取到以下关于漏洞的关键信息： 1. 漏洞编号：RHSA-2024:8690 2. 发布日期：2024年11月6日 3. 严重性：重要 4. 受影响的产品： - Red Hat OpenShift Container Platform 4.13.53 - Red Hat OpenShift Container Platform 4.13.53 for RHEL 9 x86_64 - Red Hat OpenShift Container Platform 4.13.53 for RHEL 8 x86_64 - Red Hat OpenShift Container Platform for Power 4.13 for RHEL 9 ppc64le - Red Hat OpenShift Container Platform for Power 4.13 for RHEL 8 ppc64le - Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 9 s390x - Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 8 s390x - Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 9 aarch64 - Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 8 aarch64 5. 修复的漏洞： - CVE-2024-9675：Buildah allows arbitrary directory mount - CVE-2024-9676：Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) - CVE-2024-9677：Podman: Buildah: CRI-O: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library - CVE-2024-9678：Podman: Buildah: CRI-O: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion - CVE-2024-9679：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9680：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9681：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9682：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9683：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9684：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9685：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9686：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9687：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9688：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9689：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9690：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9691：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9692：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9693：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9694：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9695：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9696：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9697：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9698：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9699：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9700：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9701：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion - CVE-2024-9702：Podman: Buildah: CRI-O: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a pani

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Red Hat OpenShift 4.13 安全公告 (RHSA-2024:8690) 含多个 CVE

目标达成感谢每一位支持者 — 我们达成了 100% 目标！