RHSA-2025:3905: Important: Logging for Red Hat OpenShift - 6.0.7

Published Apr 16, 2025

Updated

Important: Logging for Red Hat OpenShift - 6.0.7

Other sources

Logging for Red Hat OpenShift - 6.0.7lokistack-gateway-container: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

— Red Hat

Affected Software

4 affected components

Red Hat Logging Subsystem for Red Hat OpenShift

Red Hat Logging Subsystem for Red Hat OpenShift for IBM Power, little endian

Red Hat Logging Subsystem for Red Hat OpenShift for IBM Z and LinuxONE

Red Hat Logging Subsystem for Red Hat OpenShift for ARM 64

Remediation

Event History

Apr 16, 2025

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·02:42 PM

Frequently Asked Questions

What is the severity of RHSA-2025:3905?

The severity of RHSA-2025:3905 is classified as Important.

How do I fix RHSA-2025:3905?

To fix RHSA-2025:3905, it is recommended to update the Logging Subsystem for Red Hat OpenShift to the latest version available.

Which products are affected by RHSA-2025:3905?

RHSA-2025:3905 affects several products under the Logging Subsystem for Red Hat OpenShift, including multiple architectures such as IBM Power, IBM Z, and ARM 64.

What vulnerability does RHSA-2025:3905 address?

RHSA-2025:3905 addresses a vulnerability in jwt-go that allows excessive memory allocation during header parsing, identified as CVE-2025-30204.

Is there any specific configuration required for RHSA-2025:3905?

There is no specific configuration required for RHSA-2025:3905, but applying the update is crucial to mitigate the vulnerability.