Red Hat Security AdvisoryRHSA-2024:8314
Logging for Red Hat OpenShift - 6.0.1
Released 2024-10-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOL 6.0 for RHEL 9 openshift-logging/logging-loki-rhel9
Fixes 5 records
Priority MEDIUM 42
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01414 · Published 2024-07-02 · Partial fix · 1.21.12, 1.22.5
Priority MEDIUM 41
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1 CWE-674
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01127 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
Priority LOW 22
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00839 · Published 2024-09-06 · Partial fix · 1.22.7, 1.23.1
THREATIST.IORead the docs