Red Hat Security Advisory

RHSA-2024:8040

Cluster Observability Operator 0.4.1

Released 2024-10-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

COO 0.4 for RHEL 8 cluster-observability-operator/cluster-observability-operator-bundle, cluster-observability-operator/cluster-observability-rhel8-operator, cluster-observability-operator/coo-admission-webhook-rhel8 +10

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532