RHSA-2024:1508: Moderate: logging for Red Hat OpenShift security update
Logging for Red Hat OpenShift is an opinionated collector and normalizer of application, infrastructure, and audit logs. It is intended to be used for forwarding logs to various supported systems.<br>Security Fix(es):<br><li> golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON (CVE-2024-24786)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Moderate: logging for Red Hat OpenShift security update
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1508?
The severity of RHSA-2024:1508 is classified as important.
How do I fix RHSA-2024:1508?
To fix RHSA-2024:1508, you should update the affected logging subsystem packages to the latest available versions.
What products are affected by RHSA-2024:1508?
RHSA-2024:1508 affects the Logging Subsystem for various architectures of Red Hat OpenShift, including IBM Power, IBM Z, and ARM 64.
What security issues are addressed in RHSA-2024:1508?
RHSA-2024:1508 includes security fixes related to the golang-protobuf encoding/protojson.
Is there a risk of data exposure due to RHSA-2024:1508?
Yes, there is a risk of data exposure if the vulnerabilities addressed in RHSA-2024:1508 are not mitigated promptly.