RHBA-2024:11018 - Bug Fix Advisory

Topic

Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.3 updated containers are now available.

Description

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for
deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP)
control plane.

The container images have been updated to address the following security advisory: RHSA-2024:9547 (see References)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update as a new RHOSO 18.0 deployment, see
“Deploying Red Hat OpenStack Services on OpenShift” at
https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

For details on how to apply this update to an existing RHOSO 18.0 deployment, see "Updating your environment to the latest maintenance release" at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index

Affected Products

• Red Hat OpenStack Services on OpenShift 18.0 x86_64

Fixes

• BZ - 2263240 - CVE-2024-3596 freeradius: forgery attack

CVEs

• CVE-2023-52749
• CVE-2024-3596
• CVE-2024-6232
• CVE-2024-7006
• CVE-2024-7409
• CVE-2024-9407
• CVE-2024-9675
• CVE-2024-9676
• CVE-2024-10963
• CVE-2024-26656
• CVE-2024-26772
• CVE-2024-26837
• CVE-2024-26870
• CVE-2024-26906
• CVE-2024-26984
• CVE-2024-31076
• CVE-2024-35950
• CVE-2024-38564
• CVE-2024-38596
• CVE-2024-38796
• CVE-2024-40901
• CVE-2024-40924
• CVE-2024-40956
• CVE-2024-40988
• CVE-2024-41023
• CVE-2024-41060
• CVE-2024-41066
• CVE-2024-46858
• CVE-2024-52530

References

• https://access.redhat.com/errata/RHSA-2024:9547
• https://access.redhat.com/containers