RHSA-2024:7074: Moderate: Network Observability 1.6.2 for OpenShift

Published Sep 25, 2024

Updated

Moderate: Network Observability 1.6.2 for OpenShift

Other sources

Network Observability 1.6.2<br>Security Fix(es):<br><li> CVE-2024-24791 golang: net/<a href="http:" target="blank">http:</a> Denial of service due to improper 100-continue handling in net/http</li>

— Red Hat

Affected Software

4 affected components

Red Hat Network Observability (NETOBSERV) for ARM 64

Red Hat Network Observability (NETOBSERV) for IBM Power, little endian

Red Hat Network Observability (NETOBSERV)

Red Hat Network Observability (NETOBSERV) for IBM Z and LinuxONE

Remediation

Event History

Sep 25, 2024

Advisory Published

via Red Hat·12:43 AM

Oct 11, 2024

Advisory Published

via Red Hat·01:06 AM

Data Sourced

via Red Hat·01:06 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2024:7074?

The severity of RHSA-2024:7074 is classified as moderate.

What does RHSA-2024:7074 address?

RHSA-2024:7074 addresses a denial of service vulnerability caused by improper handling of 100-continue responses in net/http.

How do I fix RHSA-2024:7074?

To fix RHSA-2024:7074, it is recommended to update to Network Observability version 1.6.2 or later.

Which products are affected by RHSA-2024:7074?

The affected products include Red Hat Network Observability for ARM 64, IBM Power, and IBM Z and LinuxONE.

Is there a workaround for RHSA-2024:7074?

A workaround for RHSA-2024:7074 involves reviewing application configurations to mitigate the risk until an update can be applied.