Red Hat Security Advisory

RHSA-2024:7324

Logging for Red Hat OpenShift - 5.9.7

Released 2024-10-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9

TI-2024-30367 CVE-2024-45296 · GHSA-9wv6-86v2-598j

MEDIUM 41

path-to-regexp turns path strings into a regular expressions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00932 Published 2024-09-09 Partial fix · 0.1.10, 8.0.0 +3 CWE-1333

TI-2024-30768 CVE-2024-45801 · GHSA-mmhx-hmjr-r674

LOW 34

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00894 Published 2024-09-16 Partial fix · 2.5.4, 3.1.3 CWE-1333

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532