RHSA-2024:1507MediumCVSS 5.9

Red Hat Security Advisory: logging for Red Hat OpenShift security update

Published
March 27, 2024
Last Modified
July 31, 2026

🔗 CVE IDs covered (1)

CVE-2024-24786 →

📋 Description

CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

🎯 Affected products64

  • RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:d36b3eab11c47b4a26fadef95d4e25eec9d005579886c17b51e614679ca98c58_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:b452e0775dee21d1d5e126927fbb047ad86b244b5bcd93a990322cbc14b4723a_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:c3067f4ef5300b5b384a6682865b5f78e354e0e732884790ea36efddec70854a_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:cf15a2fd2897ad10c1f3f839071b82cfaafb80ba8257aa1628d982bd40108c6b_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:e29388425c629b3cac16c389f296b440ee921d0324ae8ddb26b1a0d03fca07e9_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:2f1b84d5033a17fe7ef009173a2515d83d787b529df5cbf55bb612bd8478559b_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:5714b90eb7ceb617aa5bd9b40d994a9f2e6b88035250db195c7320ed5aee0821_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:64164551d37345f846ab07506bec66a8baecd0a14a1d16a2686475dcf2a59fee_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6ae915675e46fa073915bd06b9c579dc23cca6de95ad3491d9278aab4e54d65c_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6f26c1f4982e5101316559e2d563de12f9e005731ff67a9a5b457d6eebee4927_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:2907d9c8268785b2ed9a8b8f69a5ab1ace2d42add272cd1db7dc6ffd2bc71ea7_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:2a46395c536f5a952e988db2ac0b28a90c9c0825a7be04ee15a06dde00d29eca_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:428090a6c43500a8a1ad703f38f9976c19d29c33f6a4f804e74895b6a80b7b9f_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:ea4cee18e08a355c6bf1c23a359e7feaa7556dbc420ac08d52c00a68ab446d25_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:13486c476c4c960cb622296251910c0cf2417695d8673c45063888990c7b1174_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:62cce3d06694297ba231953f0947f5bf1d5155608fd59bc9c95b8a281a5108b9_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:b09848a939c73bfcd412aa895d3819a58294d640650ea36f162f18c9e0c9be9e_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:c030d6f35e5c9da7f331716daf760d01bfa4d099b8b7310127995253ce84b80b_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:10036742186ba57fe6ba40978555e85f30ddebcdde1b7e6b851320a630794acc_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:4036b235152b5713e8cc0aabd65351e8d0c161ba208eef87bdd75ea12f4a8ee5_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:9f9f2ae1ef427a0cc34bf997ebe9cc0386b0e6eddb59ae7fbe4f799fa4ca7955_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:ecf254af359f839bb766ab80b3d991078a9d7464168af9f9b34ca6ddfc7a79bc_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:0173bd3a0de9d979d6acc8313380dcfb7b0f4ec34e1a97a1b26666868b042065_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:0cc3cc43c340ba943db2025ec07d76e98df07e8987d10fde7e7673412350f6f1_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:3a302178111d315bca9ef84695ff1f49f5e4ada8bd620a63916fb04d48a0fa87_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:52c03a63e08960a448e34d7e82d709bff4b5fad9a376a2366978567e1e887341_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:5bb8438afbd01bc2e8ce13ac82eab8eb2eccf74fe84e9881440d9e620cbc0d7c_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:7e4851714d7228357fd846a525cfe2e691b53f887c83da8ea3e5e82710069b29_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:bbd861659af5a799485f9c297e4709a2b94dc90cb2a35b9bfd1613314767b431_ppc64le as a component of RHOL 5.6 for RHEL 8
  • +34 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.6, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)