Red Hat Security AdvisoryRHSA-2025:3131
Logging for Red Hat OpenShift - 6.1.4
Released 2025-03-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHOL 6.1 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +7
Fixes 3 records
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00399 · Published 2025-02-24 · Partial fix · 4.0.5, 3.0.4 CWE-770
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0071 · Published 2025-01-28 · Partial fix · 1.22.11, 1.23.5 +1
