The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. https://go.dev/cl/569356 https://pkg.go.dev/vuln/GO-2024-2611
Update: A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown option is set (as well as when unmarshaling into any message which contains a google.protobuf.Any). There is no UnmarshalUnknown option. In addition, version 1.33.0 of google.golang.org/protobuf inadvertently introduced an incompatibility with the older github.com/golang/protobuf module. (https://github.com/golang/protobuf/issues/1596) Users of the older module should update to github.com/golang/prot....4. - Damien, apologetically on behalf of the Go team. comment 0 and doctext updated for the same.
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1363 https://access.redhat.com/errata/RHSA-2024:1363
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:1362 https://access.redhat.com/errata/RHSA-2024:1362
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:1456 https://access.redhat.com/errata/RHSA-2024:1456
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:1461 https://access.redhat.com/errata/RHSA-2024:1461
This issue has been addressed in the following products: RHOL-5.6-RHEL-8 Via RHSA-2024:1507 https://access.redhat.com/errata/RHSA-2024:1507
This issue has been addressed in the following products: RHOL-5.7-RHEL-8 Via RHSA-2024:1508 https://access.redhat.com/errata/RHSA-2024:1508
This issue has been addressed in the following products: RHOL-5.8-RHEL-9 Via RHSA-2024:1474 https://access.redhat.com/errata/RHSA-2024:1474
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:1537 https://access.redhat.com/errata/RHSA-2024:1537
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:1538 https://access.redhat.com/errata/RHSA-2024:1538
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1559 https://access.redhat.com/errata/RHSA-2024:1559
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1563 https://access.redhat.com/errata/RHSA-2024:1563
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:1574 https://access.redhat.com/errata/RHSA-2024:1574
This issue has been addressed in the following products: Red Hat Advanced Cluster Management for Kubernetes 2.8 for RHEL 8 Via RHSA-2024:1665 https://access.redhat.com/errata/RHSA-2024:1665
This issue has been addressed in the following products: Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 Via RHSA-2024:1795 https://access.redhat.com/errata/RHSA-2024:1795
This issue has been addressed in the following products: OADP-1.3-RHEL-9 Via RHSA-2024:1859 https://access.redhat.com/errata/RHSA-2024:1859
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:1874 https://access.redhat.com/errata/RHSA-2024:1874
This issue has been addressed in the following products: Red Hat Migration Toolkit for Containers 1.8 Via RHSA-2024:1925 https://access.redhat.com/errata/RHSA-2024:1925
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2549 https://access.redhat.com/errata/RHSA-2024:2549
This issue has been addressed in the following products: Red Hat Migration Toolkit for Containers 1.7 Via RHSA-2024:2639 https://access.redhat.com/errata/RHSA-2024:2639
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:2666 https://access.redhat.com/errata/RHSA-2024:2666
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:2773 https://access.redhat.com/errata/RHSA-2024:2773
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:2781 https://access.redhat.com/errata/RHSA-2024:2781
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:3254 https://access.redhat.com/errata/RHSA-2024:3254
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:2874 https://access.redhat.com/errata/RHSA-2024:2874
This issue has been addressed in the following products: MTA-7.0-RHEL-9 MTA-7.0-RHEL-8 Via RHSA-2024:3316 https://access.redhat.com/errata/RHSA-2024:3316
This issue has been addressed in the following products: Red Hat Openshift distributed tracing 3.2 Via RHSA-2024:3621 https://access.redhat.com/errata/RHSA-2024:3621
This issue has been addressed in the following products: OCP-Tools-4.13-RHEL-8 Via RHSA-2024:3636 https://access.redhat.com/errata/RHSA-2024:3636
This issue has been addressed in the following products: OCP-Tools-4.14-RHEL-8 Via RHSA-2024:3634 https://access.redhat.com/errata/RHSA-2024:3634
This issue has been addressed in the following products: OCP-Tools-4.12-RHEL-8 Via RHSA-2024:3635 https://access.redhat.com/errata/RHSA-2024:3635
This issue has been addressed in the following products: Red Hat OpenShift Service Mesh 2.5 for RHEL 8 Via RHSA-2024:3683 https://access.redhat.com/errata/RHSA-2024:3683
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:3715 https://access.redhat.com/errata/RHSA-2024:3715
Created golang tracking bugs for this issue: Affects: epel-all [bug 2291459] Affects: fedora-all [bug 2291460]
This issue has been addressed in the following products: NETWORK-OBSERVABILITY-1.6.0-RHEL-9 Via RHSA-2024:3868 https://access.redhat.com/errata/RHSA-2024:3868
This issue has been addressed in the following products: RHOSS-1.33-RHEL-8 Via RHSA-2024:4028 https://access.redhat.com/errata/RHSA-2024:4028
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0040 https://access.redhat.com/errata/RHSA-2024:0040
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0041 https://access.redhat.com/errata/RHSA-2024:0041
This issue has been addressed in the following products: Red Hat OpenShift GitOps 1.12 Red Hat OpenShift GitOps 1.12 - RHEL 9 Via RHSA-2024:4163 https://access.redhat.com/errata/RHSA-2024:4163
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0045 https://access.redhat.com/errata/RHSA-2024:0045
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0043 https://access.redhat.com/errata/RHSA-2024:0043
This issue has been addressed in the following products: RODOO-1.1-RHEL-9 Via RHSA-2024:1616 https://access.redhat.com/errata/RHSA-2024:1616
This issue has been addressed in the following products: OSSO-1.3-RHEL-9 Via RHSA-2024:3637 https://access.redhat.com/errata/RHSA-2024:3637
This issue has been addressed in the following products: KDO-5.0-RHEL-9 Via RHSA-2024:3617 https://access.redhat.com/errata/RHSA-2024:3617
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:4246 https://access.redhat.com/errata/RHSA-2024:4246
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:4150 https://access.redhat.com/errata/RHSA-2024:4150
This issue has been addressed in the following products: RHEL-9-CNV-4.16 Via RHSA-2024:4455 https://access.redhat.com/errata/RHSA-2024:4455
This issue has been addressed in the following products: RHODF-4.16-RHEL-9 Via RHSA-2024:4591 https://access.redhat.com/errata/RHSA-2024:4591
This issue has been addressed in the following products: OCP-Tools-4.15-RHEL-8 Via RHSA-2024:4597 https://access.redhat.com/errata/RHSA-2024:4597
This issue has been addressed in the following products: Red Hat OpenShift GitOps 1.11 Via RHSA-2024:4626 https://access.redhat.com/errata/RHSA-2024:4626
This issue has been addressed in the following products: RHEL-9-CNV-4.16 Via RHSA-2024:5054 https://access.redhat.com/errata/RHSA-2024:5054
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:5422 https://access.redhat.com/errata/RHSA-2024:5422
This issue has been addressed in the following products: OPENSHIFT-BUILDS-1.1-RHEL-8 Via RHSA-2024:6221 https://access.redhat.com/errata/RHSA-2024:6221
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:6004 https://access.redhat.com/errata/RHSA-2024:6004
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:6409 https://access.redhat.com/errata/RHSA-2024:6409
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:6824 https://access.redhat.com/errata/RHSA-2024:6824
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:3717 https://access.redhat.com/errata/RHSA-2024:3717
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:3718 https://access.redhat.com/errata/RHSA-2024:3718
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:7184 https://access.redhat.com/errata/RHSA-2024:7184
This issue has been addressed in the following products: CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 Via RHSA-2024:8040 https://access.redhat.com/errata/RHSA-2024:8040
This issue has been addressed in the following products: RODOO-1.2-RHEL-9 Via RHSA-2024:7548 https://access.redhat.com/errata/RHSA-2024:7548
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:7922 https://access.redhat.com/errata/RHSA-2024:7922
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:8434 https://access.redhat.com/errata/RHSA-2024:8434
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:8415 https://access.redhat.com/errata/RHSA-2024:8415
This issue has been addressed in the following products: RHODF-4.17-RHEL-9 Via RHSA-2024:8676 https://access.redhat.com/errata/RHSA-2024:8676
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:9615 https://access.redhat.com/errata/RHSA-2024:9615
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:10147 https://access.redhat.com/errata/RHSA-2024:10147
This issue has been addressed in the following products: KDO-5.0-RHEL-9 Via RHSA-2024:8704 https://access.redhat.com/errata/RHSA-2024:8704
This issue has been addressed in the following products: RHOSS-1.35-RHEL-8 Via RHSA-2025:0664 https://access.redhat.com/errata/RHSA-2025:0664
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2025:0654 https://access.redhat.com/errata/RHSA-2025:0654
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2024:6122 https://access.redhat.com/errata/RHSA-2024:6122
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2025:2449 https://access.redhat.com/errata/RHSA-2025:2449
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2025:4204 https://access.redhat.com/errata/RHSA-2025:4204