Memory leak in openssl - CVE-2024-1394

Vulnerability identifier: #VU87830

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-1394

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due memory leak in the RSA encrypting/decrypting code when handling untrusted input. A remote attacker can pass specially crafted data to the application and perform denial of service attack.

openssl
go-crypto-openssl
go
Oracle Linux
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Cryostat
IBM MQ Operator
IBM Watson Discovery for IBM Cloud Pak for Data
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Supplied MQ Advanced Queue Manager Container images
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
toolbox-tests
toolbox
toolbox (Red Hat package)
collectd-sensubility (Red Hat package)
udica
conmon-rs (Red Hat package)
golang-github-prometheus-promu (Red Hat package)
butane (Red Hat package)
containernetworking-plugins (Red Hat package)
runc (Red Hat package)
slirp4netns (Red Hat package)
runc
slirp4netns
oci-seccomp-bpf-hook
containernetworking-plugins
receptor (Red Hat package)
skopeo (Red Hat package)
aardvark-dns
fuse-overlayfs (Red Hat package)
netavark
fuse-overlayfs
crun (Red Hat package)
crun
skopeo
skopeo-tests
go-toolset-1.19-golang (Red Hat package)
golang (Red Hat package)
delve
go-toolset
golang-tests
golang-src
golang
golang-bin
golang-misc
golang-docs
buildah (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah-tests
buildah
containers-common (Red Hat package)
containers-common
conmon (Red Hat package)
conmon
nmstate (Red Hat package)
ansible-runner (Red Hat package)
haproxy (Red Hat package)
ignition (Red Hat package)
ansible-core (Red Hat package)
container-selinux
container-selinux (Red Hat package)
etcd (Red Hat package)
python3x-aiohttp (Red Hat package)
python-aiohttp (Red Hat package)
criu-libs
criu-devel
python3-criu
criu
crit
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
podman (Red Hat package)
python3x-django (Red Hat package)
python-django (Red Hat package)
libslirp-devel
libslirp
libslirp (Red Hat package)
automation-controller (Red Hat package)
python3-podman
podman-remote
podman-docker
podman-catatonit
podman
podman-tests
podman-gvproxy
podman-plugins
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-clients (Red Hat package)
openshift (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
microshift (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
grafana-pcp (Red Hat package)
grafana-pcp
grafana (Red Hat package)
grafana-selinux
grafana
ovn24.03 (Red Hat package)
cockpit-podman
osbuild-composer (Red Hat package)
osbuild-composer-worker
osbuild-composer-core
osbuild-composer
osbuild-luks2
python3-osbuild
osbuild-selinux
osbuild-ostree
osbuild-lvm2
osbuild-doc
osbuild-depsolve-dnf
osbuild
ostree (Red Hat package)
IBM Cloud Pak System
Watson CP4D Data Stores
Storage Protect Plus Server

Install updates from vendor's website.

openssl - update to 2.0.2
go-crypto-openssl - update to 0.2.9
go - update to 1.22.1-2
IBM MQ Operator - addressed in versions 2.0.21, 3.1.2
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.1, 2.5.2
Red Hat OpenShift Container Platform - addressed in versions 4.12.54, 4.13.40, 4.14.19, 4.14.21, 4.14.22, 4.14.34, 4.15.6, 4.15.9, 4.16.0
toolbox-tests - update to 0.0.99.5-2.0.1
toolbox - update to 0.0.99.5-2.0.1
toolbox (Red Hat package) - addressed in versions 0.1.0-2.rhaos4.16.el8, 0.1.2-1.rhaos4.16.el9
collectd-sensubility (Red Hat package) - addressed in versions 0.2.1-3.el8ost, 0.2.1-3.el9ost
udica - update to 0.2.6-21
conmon-rs (Red Hat package) - addressed in versions 0.5.1-4.rhaos4.12.el8, 0.5.1-4.rhaos4.12.el9, 0.6.3-1.rhaos4.16.el8, 0.6.3-1.rhaos4.16.el9
golang-github-prometheus-promu (Red Hat package) - addressed in versions 0.15.0-15.2.gitd5383c5.el9, 0.15.0-15.3.gitd5383c5.el8
butane (Red Hat package) - addressed in versions 0.16.0-2.2.rhaos4.12.el8, 0.19.0-1.3.rhaos4.14.el8, 0.20.0-1.1.rhaos4.15.el8, 0.21.0-1.rhaos4.16.el8
containernetworking-plugins (Red Hat package) - addressed in versions 1.0.1-6.el9_0, 1.4.0-1.1.rhaos4.12.el8, 1.4.0-1.1.rhaos4.13.el8, 1.4.0-1.2.rhaos4.14.el8, 1.4.0-1.2.rhaos4.15.el8, 1.4.0-2.1.rhaos4.16.el8
runc (Red Hat package) - addressed in versions 1.1.6-5.2.rhaos4.12.el8, 1.1.12-1.1.rhaos4.13.el8, 1.1.12-1.1.rhaos4.13.el9, 1.1.12-1.1.rhaos4.14.el8, 1.1.12-1.1.rhaos4.15.el8, 1.1.12-1.1.rhaos4.15.el9, 1.1.12-1.2.rhaos4.14.el8, 1.1.12-3.1.rhaos4.16.el8, 1.1.12-3.1.rhaos4.16.el9
slirp4netns (Red Hat package) - update to 1.1.8-2.rhaos4.16.el8
runc - update to 1.1.12-4.0.1
slirp4netns - update to 1.2.3-1
oci-seccomp-bpf-hook - update to 1.2.10-1
containernetworking-plugins - update to 1.4.0-5.0.1
receptor (Red Hat package) - addressed in versions 1.4.5-1.el8ap, 1.4.5-1.el9ap
skopeo (Red Hat package) - addressed in versions 1.9.4-3.2.rhaos4.12.el8, 1.9.4-3.2.rhaos4.12.el9, 1.11.2-2.2.rhaos4.13.el8, 1.11.2-2.2.rhaos4.13.el9, 1.11.2-10.3.rhaos4.14.el8, 1.11.2-10.3.rhaos4.14.el9, 1.11.2-10.4.rhaos4.14.el8, 1.11.2-21.2.rhaos4.15.el8, 1.11.2-21.2.rhaos4.15.el9, 1.14.3-3.el9_4, 1.14.4-1.rhaos4.16.el8, 1.14.4-1.rhaos4.16.el9
aardvark-dns - update to 1.10.0-2.0.1
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.16.el8
netavark - update to 1.10.3-1.0.1
fuse-overlayfs - update to 1.13-1.0.1
crun (Red Hat package) - addressed in versions 1.14.3-1.rhaos4.16.el8, 1.14.3-1.rhaos4.16.el9
crun - update to 1.14.3-2
skopeo - update to 1.14.5-3.0.1
skopeo-tests - update to 1.14.5-3.0.1
go-toolset-1.19-golang (Red Hat package) - update to 1.19.13-6.el7_9
golang (Red Hat package) - addressed in versions 1.19.13-7.el9_2, 1.20.12-2.el9_3, 1.21.9-2.el9_4
delve - update to 1.20.2-1.0.1
go-toolset - update to 1.20.12-1
golang-tests - update to 1.20.12-3.0.1
golang-src - update to 1.20.12-3.0.1
golang - update to 1.20.12-3.0.1
golang-bin - update to 1.20.12-3.0.1
golang-misc - update to 1.20.12-3.0.1
golang-docs - update to 1.20.12-3.0.1
buildah (Red Hat package) - addressed in versions 1.23.4-5.2.rhaos4.12.el8, 1.23.4-5.2.rhaos4.12.el9, 1.29.1-2.2.rhaos4.13.el8, 1.29.1-2.2.rhaos4.13.el9, 1.29.1-10.3.rhaos4.14.el8, 1.29.1-20.3.rhaos4.15.el8, 1.29.1-20.3.rhaos4.15.el9, 1.33.7-1.1.rhaos4.16.el8, 1.33.7-1.1.rhaos4.16.el9
cri-tools (Red Hat package) - addressed in versions 1.25.0-2.2.el8, 1.25.0-2.2.el9, 1.26.0-4.1.el8, 1.26.0-4.2.el9, 1.27.0-3.1.el8, 1.27.0-3.1.el9, 1.27.0-3.2.el8, 1.28.0-3.1.el8, 1.28.0-3.1.el9, 1.29.0-3.1.el8, 1.29.0-3.1.el9
cri-o (Red Hat package) - addressed in versions 1.25.3-5.2.rhaos4.12.git44a2cb2.el9, 1.25.5-13.1.rhaos4.12.git76343da.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el8, 1.26.5-11.1.rhaos4.13.git919cc6e.el9, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el8, 1.27.4-6.1.rhaos4.14.gitd09e4c0.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.28.4-8.rhaos4.15.git24f50b9.el8, 1.28.4-8.rhaos4.15.git24f50b9.el9, 1.29.5-5.rhaos4.16.git7032128.el8, 1.29.5-5.rhaos4.16.git7032128.el9
buildah-tests - update to 1.34.0-1
buildah - update to 1.34.0-1
containers-common (Red Hat package) - addressed in versions 1-77.rhaos4.16.el8, 1-77.rhaos4.16.el9
containers-common - update to 1-82.0.1
conmon (Red Hat package) - addressed in versions 2.1.2-5.2.rhaos4.12.el8, 2.1.2-6.2.rhaos4.12.el9, 2.1.7-2.2.rhaos4.13.el8, 2.1.7-2.2.rhaos4.13.el9, 2.1.7-3.3.rhaos4.14.el8, 2.1.7-3.3.rhaos4.14.el9, 2.1.7-10.1.rhaos4.15.el9, 2.1.10-2.1.rhaos4.16.el8, 2.1.10-2.1.rhaos4.16.el9
conmon - update to 2.1.10-1
nmstate (Red Hat package) - update to 2.2.27-1.rhaos4.13.el8
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
ansible-runner (Red Hat package) - addressed in versions 2.3.6-1.el8ap, 2.3.6-1.el9ap
haproxy (Red Hat package) - addressed in versions 2.6.13-3.rhaos4.16.el8, 2.8.5-2.rhaos4.16.el9
ignition (Red Hat package) - addressed in versions 2.14.0-5.2.rhaos4.12.el9, 2.14.0-7.1.rhaos4.12.el8, 2.15.0-7.1.rhaos4.13.el9, 2.16.2-2.1.rhaos4.14.el9, 2.16.2-2.1.rhaos4.15.el9, 2.18.0-2.1.rhaos4.16.el9
ansible-core (Red Hat package) - addressed in versions 2.15.10-1.el8ap, 2.15.10-1.el9ap
container-selinux - update to 2.229.0-2
container-selinux (Red Hat package) - addressed in versions 2.231.0-1.rhaos4.16.el8, 2.231.0-1.rhaos4.16.el9
etcd (Red Hat package) - update to 3.4.26-8.el9ost
python3x-aiohttp (Red Hat package) - update to 3.9.3-1.el8ap
python-aiohttp (Red Hat package) - update to 3.9.3-1.el9ap
criu-libs - update to 3.18-5.0.1
criu-devel - update to 3.18-5.0.1
python3-criu - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
crit - update to 3.18-5.0.1
python3x-pulpcore (Red Hat package) - update to 3.28.24-1.el8ap
python-pulpcore (Red Hat package) - update to 3.28.24-1.el9ap
podman (Red Hat package) - addressed in versions 4.2.0-4.el9_0, 4.2.0-7.2.rhaos4.12.el9, 4.4.1-2.1.rhaos4.12.el8, 4.4.1-5.2.rhaos4.13.el8, 4.4.1-6.2.rhaos4.13.el9, 4.4.1-11.3.rhaos4.14.el8, 4.4.1-11.3.rhaos4.14.el9, 4.4.1-21.1.rhaos4.15.el8, 4.4.1-21.1.rhaos4.15.el9, 4.9.4-5.1.rhaos4.16.el8, 4.9.4-5.1.rhaos4.16.el9
python3x-django (Red Hat package) - update to 4.2.11-1.el8ap
python-django (Red Hat package) - update to 4.2.11-1.el9ap
libslirp-devel - update to 4.4.0-2
libslirp - update to 4.4.0-2
libslirp (Red Hat package) - addressed in versions 4.4.0-4.rhaos4.12.el8, 4.4.0-4.rhaos4.16.el8
automation-controller (Red Hat package) - addressed in versions 4.5.5-2.el8ap, 4.5.5-2.el9ap
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.5
python3-podman - update to 4.9.0-2
podman-remote - update to 4.9.4-12.0.1
podman-docker - update to 4.9.4-12.0.1
podman-catatonit - update to 4.9.4-12.0.1
podman - update to 4.9.4-12.0.1
podman-tests - update to 4.9.4-12.0.1
podman-gvproxy - update to 4.9.4-12.0.1
podman-plugins - update to 4.9.4-12.0.1
openshift-ansible (Red Hat package) - addressed in versions 4.12.0-202403201504.p0.gd97dd6f.assembly.stream.el8, 4.13.0-202403201503.p0.g2d540c5.assembly.stream.el8, 4.13.0-202403201503.p0.g2d540c5.assembly.stream.el9, 4.14.0-202403201503.p0.g81558cc.assembly.stream.el8, 4.14.0-202403201503.p0.g81558cc.assembly.stream.el9, 4.14.0-202404151639.p0.g81558cc.assembly.stream.el8, 4.15.0-202403201503.p0.g1c9b99e.assembly.stream.el8, 4.15.0-202403201503.p0.g1c9b99e.assembly.stream.el9, 4.16.0-202404181812.p0.g7806532.assembly.stream.el8, 4.16.0-202404181812.p0.g7806532.assembly.stream.el9
openshift-kuryr (Red Hat package) - addressed in versions 4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202403201503.p0.g36754b7.assembly.stream.el8, 4.14.0-202403201503.p0.g8926a29.assembly.stream.el8, 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - addressed in versions 4.12.0-202403201504.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202403201503.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202403201503.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202403201503.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202404181812.p0.gd2acdd5.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8, 4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el9, 4.13.0-202404020737.p0.gd192e90.assembly.stream.el8, 4.13.0-202404020737.p0.gd192e90.assembly.stream.el9, 4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8, 4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el9, 4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8, 4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8, 4.15.0-202403211240.p0.g62c4d45.assembly.stream.el9, 4.16.0-202406052127.p0.ga245041.assembly.stream.el8, 4.16.0-202406052127.p0.ga245041.assembly.stream.el9
openshift (Red Hat package) - addressed in versions 4.12.0-202403251017.p0.g9946c63.assembly.stream.el8, 4.12.0-202403251017.p0.g9946c63.assembly.stream.el9, 4.13.0-202403241039.p0.g03ee898.assembly.stream.el8, 4.13.0-202403241039.p0.g03ee898.assembly.stream.el9, 4.14.0-202403251040.p0.g749fe1d.assembly.stream.el8, 4.14.0-202403251040.p0.g749fe1d.assembly.stream.el9, 4.14.0-202404160939.p0.g7bee54d.assembly.stream.el8, 4.15.0-202403211549.p0.gf1b5f6c.assembly.stream.el8, 4.15.0-202403211549.p0.gf1b5f6c.assembly.stream.el9, 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8, 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8, 4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9, 4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8, 4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el9, 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8, 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el9
microshift (Red Hat package) - addressed in versions 4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9, 4.15.6-202403280951.p0.g94b1c2a.assembly.4.15.6.el9
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.16.0
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.16.0-202404181812.p0.g26b43df.assembly.stream.el8, 4.16.0-202404181812.p0.g26b43df.assembly.stream.el9
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.16.0-202404301345.p0.g0e95532.assembly.stream.el8, 4.16.0-202404301345.p0.g0e95532.assembly.stream.el9
kernel (Red Hat package) - update to 4.18.0-372.98.1.el8_6
kernel-rt (Red Hat package) - update to 4.18.0-372.98.1.rt7.258.el8_6
Watson CP4D Data Stores - update to 5.0.3
grafana-pcp (Red Hat package) - addressed in versions 5.1.1-2.el8_9, 5.1.1-2.el9_3, 5.1.1-2.el9_4
grafana-pcp - update to 5.1.1-2.0.1
Red Hat Migration Toolkit for Applications - update to 7.0.3
grafana (Red Hat package) - addressed in versions 9.2.10-8.el8_9, 9.2.10-8.el9_3, 9.2.10-16.el8_10, 9.2.10-16.el9_4
grafana-selinux - update to 9.2.10-16.0.1
grafana - update to 9.2.10-16.0.1
IBM Supplied MQ Advanced Queue Manager Container images - addressed in versions 9.3.0.17-r1, 9.3.5.1-r1
Storage Protect Plus Server - update to 10.1.16.2
Red Hat OpenStack - update to 17.1
ovn24.03 (Red Hat package) - update to 24.03.2-19.el9fdp
cockpit-podman - update to 84.1-1
osbuild-composer (Red Hat package) - update to 101-2.el8_10
osbuild-composer-worker - update to 132.2-1.0.1
osbuild-composer-core - update to 132.2-1.0.1
osbuild-composer - update to 132.2-1.0.1
osbuild-luks2 - update to 141.2-1.0.1
python3-osbuild - update to 141.2-1.0.1
osbuild-selinux - update to 141.2-1.0.1
osbuild-ostree - update to 141.2-1.0.1
osbuild-lvm2 - update to 141.2-1.0.1
osbuild-doc - update to 141.2-1.0.1
osbuild-depsolve-dnf - update to 141.2-1.0.1
osbuild - update to 141.2-1.0.1
ostree (Red Hat package) - update to 2024.1-2.el9

• https://bugzilla.redhat.com/show_bug.cgi?id=2262921
• https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6

• Memory leak in golang-fips openssl
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Developer Tools update for go-toolset-1.19-golang
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for grafana-pcp
• Denial of service in Microsoft build of the Go toolset
• Denial of service in FIPS enabled Go
• Denial of service in Microsoft Go crypto backend for Linux
• Red Hat Enterprise Linux 8 update for grafana-pcp
• Red Hat Enterprise Linux 8 update for grafana
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Denial of service in Red Hat build of MicroShift
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Denial of service in Red Hat build of MicroShift 4.14
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Denial of service in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh Containers 2.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.14
• Multiple vulnerabilities in Red Hat build of Cryostat 2 on RHEL 8
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for golang
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in IBM Watson Discovery
• Red Hat Enterprise Linux 8 update for grafana
• Multiple vulnerabilities in Red Hat OpenStack 17 packages
• Multiple vulnerabilities in Red Hat OpenStack 17 packages
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Red Hat Enterprise Linux 9 update for golang
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Red Hat Enterprise Linux 9 update for skopeo
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Red Hat Enterprise Linux 9 update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Multiple vulnerabilities in Storage Protect Plus Server
• Red Hat Enterprise Linux 8 update for osbuild-composer
• IBM Watson CP4D Data Stores update for Golang golang-fips/openssl
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Cloud Pak System
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for grafana
• Anolis OS update for grafana-pcp
• Anolis OS update for container-tools:an8 module
• Anolis OS update for osbuild
• Anolis OS update for osbuild-composer
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0