RHSA-2024:2096MediumCVSS 6.5

Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1

Published
May 1, 2024
Last Modified
September 23, 2026

🔗 CVE IDs covered (6)

CVE-2024-24785 →CVE-2024-24786 →CVE-2024-28180 →CVE-2023-45289 →CVE-2023-45290 →CVE-2024-24783 →

📋 Description

CVE-2023-45289 — golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect CVE-2023-45290 — golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2024-24783 — golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24785 — golang: html/template: errors returned from MarshalJSON methods may break template escaping CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-28180 — jose-go: improper handling of highly compressed data

🎯 Affected products43

  • RHOL 5.9 for RHEL 9
  • openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64 as a component of RHOL 5.9 for RHEL 9
  • openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64 as a component of RHOL 5.9 for RHEL 9
  • +13 more not shown

✅ Remediation

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html For Red Hat OpenShift Logging 5.9, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (14)