Red Hat Security Advisory

RHSA-2024:1474

logging for Red Hat OpenShift security update

Released 2024-03-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14

TI-2024-19051 CVE-2024-28849 · GHSA-cxjh-pqwp-8mfp

MEDIUM 62

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01044 Published 2024-03-14 Partial fix · 1.15.6 CWE-200

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835