[release-1.14] CVE-2024-3727

[TomSweeneyRedHat]

Add the fix to the release-14 branch for CVE-2024-3727. This will fix the issue in OCP v4.16 and RHEL 8.10/9.4

Currently addresses: https://issues.redhat.com/browse/OCPBUGS-33267 until the RHEL 8.10 and 9.4 Jira cards are created.

[packit-as-a-service]

Ephemeral COPR build failed. @containers/packit-build please check.

[mtrmac]

@lsm5 On this stable release-1.14 branch, do we need similar .packit.yml changes as in #2312, or should that be removed entirely? Or we can just ignore the failures.

I’m fine with any of that, but given that this PR is intended to target the failing RHEL 8/9, I thought I’d double-check before moving forward with tagging a possibly-unwanted release.

[TomSweeneyRedHat]

@lsm5 I think the packit changes should be made here. We're likely to be supporting this version for a long time on RHEL.

[lsm5]

what exact version will this be supported on ? Only RHEL 9? I can update the config for this branch.

[mtrmac]

To double-check, ideally we should merge #2341, and then see the tests succeed here, is that correct?

[lsm5]

@TomSweeneyRedHat please rebase on latest release-1.14 . That will pick up the latest packit targets.

[TomSweeneyRedHat]

rebased and repushed, 🤞

[mtrmac]

Thanks again!