Fedora Account System
Red Hat Associate
Red Hat Customer
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. https://go.dev/cl/569356 https://pkg.go.dev/vuln/GO-2024-2611
Update: A small correction: This vulnerability applies when the UnmarshalOptions.DiscardUnknown option is set (as well as when unmarshaling into any message which contains a google.protobuf.Any). There is no UnmarshalUnknown option. In addition, version 1.33.0 of google.golang.org/protobuf inadvertently introduced an incompatibility with the older github.com/golang/protobuf module. (https://github.com/golang/protobuf/issues/1596) Users of the older module should update to github.com/golang/prot....4. - Damien, apologetically on behalf of the Go team. comment 0 and doctext updated for the same.
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1363 https://access.redhat.com/errata/RHSA-2024:1363
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:1362 https://access.redhat.com/errata/RHSA-2024:1362
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:1456 https://access.redhat.com/errata/RHSA-2024:1456
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:1461 https://access.redhat.com/errata/RHSA-2024:1461
This issue has been addressed in the following products: RHOL-5.6-RHEL-8 Via RHSA-2024:1507 https://access.redhat.com/errata/RHSA-2024:1507
This issue has been addressed in the following products: RHOL-5.7-RHEL-8 Via RHSA-2024:1508 https://access.redhat.com/errata/RHSA-2024:1508
This issue has been addressed in the following products: RHOL-5.8-RHEL-9 Via RHSA-2024:1474 https://access.redhat.com/errata/RHSA-2024:1474
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:1537 https://access.redhat.com/errata/RHSA-2024:1537
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:1538 https://access.redhat.com/errata/RHSA-2024:1538
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1559 https://access.redhat.com/errata/RHSA-2024:1559
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:1563 https://access.redhat.com/errata/RHSA-2024:1563
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:1574 https://access.redhat.com/errata/RHSA-2024:1574
This issue has been addressed in the following products: Red Hat Advanced Cluster Management for Kubernetes 2.8 for RHEL 8 Via RHSA-2024:1665 https://access.redhat.com/errata/RHSA-2024:1665
This issue has been addressed in the following products: Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 Via RHSA-2024:1795 https://access.redhat.com/errata/RHSA-2024:1795
This issue has been addressed in the following products: OADP-1.3-RHEL-9 Via RHSA-2024:1859 https://access.redhat.com/errata/RHSA-2024:1859
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2024:1874 https://access.redhat.com/errata/RHSA-2024:1874
This issue has been addressed in the following products: Red Hat Migration Toolkit for Containers 1.8 Via RHSA-2024:1925 https://access.redhat.com/errata/RHSA-2024:1925
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2549 https://access.redhat.com/errata/RHSA-2024:2549
This issue has been addressed in the following products: Red Hat Migration Toolkit for Containers 1.7 Via RHSA-2024:2639 https://access.redhat.com/errata/RHSA-2024:2639
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:2666 https://access.redhat.com/errata/RHSA-2024:2666
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:2773 https://access.redhat.com/errata/RHSA-2024:2773
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:2781 https://access.redhat.com/errata/RHSA-2024:2781
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:3254 https://access.redhat.com/errata/RHSA-2024:3254
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.13 Via RHSA-2024:2874 https://access.redhat.com/errata/RHSA-2024:2874
This issue has been addressed in the following products: MTA-7.0-RHEL-9 MTA-7.0-RHEL-8 Via RHSA-2024:3316 https://access.redhat.com/errata/RHSA-2024:3316
This issue has been addressed in the following products: Red Hat Openshift distributed tracing 3.2 Via RHSA-2024:3621 https://access.redhat.com/errata/RHSA-2024:3621
This issue has been addressed in the following products: OCP-Tools-4.13-RHEL-8 Via RHSA-2024:3636 https://access.redhat.com/errata/RHSA-2024:3636
This issue has been addressed in the following products: OCP-Tools-4.14-RHEL-8 Via RHSA-2024:3634 https://access.redhat.com/errata/RHSA-2024:3634
This issue has been addressed in the following products: OCP-Tools-4.12-RHEL-8 Via RHSA-2024:3635 https://access.redhat.com/errata/RHSA-2024:3635
This issue has been addressed in the following products: Red Hat OpenShift Service Mesh 2.5 for RHEL 8 Via RHSA-2024:3683 https://access.redhat.com/errata/RHSA-2024:3683
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2024:3715 https://access.redhat.com/errata/RHSA-2024:3715
Created golang tracking bugs for this issue: Affects: epel-all [bug 2291459] Affects: fedora-all [bug 2291460]
This issue has been addressed in the following products: NETWORK-OBSERVABILITY-1.6.0-RHEL-9 Via RHSA-2024:3868 https://access.redhat.com/errata/RHSA-2024:3868
This issue has been addressed in the following products: RHOSS-1.33-RHEL-8 Via RHSA-2024:4028 https://access.redhat.com/errata/RHSA-2024:4028
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0040 https://access.redhat.com/errata/RHSA-2024:0040
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0041 https://access.redhat.com/errata/RHSA-2024:0041
This issue has been addressed in the following products: Red Hat OpenShift GitOps 1.12 Red Hat OpenShift GitOps 1.12 - RHEL 9 Via RHSA-2024:4163 https://access.redhat.com/errata/RHSA-2024:4163
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0045 https://access.redhat.com/errata/RHSA-2024:0045
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:0043 https://access.redhat.com/errata/RHSA-2024:0043
This issue has been addressed in the following products: RODOO-1.1-RHEL-9 Via RHSA-2024:1616 https://access.redhat.com/errata/RHSA-2024:1616
This issue has been addressed in the following products: OSSO-1.3-RHEL-9 Via RHSA-2024:3637 https://access.redhat.com/errata/RHSA-2024:3637
This issue has been addressed in the following products: KDO-5.0-RHEL-9 Via RHSA-2024:3617 https://access.redhat.com/errata/RHSA-2024:3617
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:4246 https://access.redhat.com/errata/RHSA-2024:4246
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:4150 https://access.redhat.com/errata/RHSA-2024:4150
This issue has been addressed in the following products: RHEL-9-CNV-4.16 Via RHSA-2024:4455 https://access.redhat.com/errata/RHSA-2024:4455
This issue has been addressed in the following products: RHODF-4.16-RHEL-9 Via RHSA-2024:4591 https://access.redhat.com/errata/RHSA-2024:4591
This issue has been addressed in the following products: OCP-Tools-4.15-RHEL-8 Via RHSA-2024:4597 https://access.redhat.com/errata/RHSA-2024:4597
This issue has been addressed in the following products: Red Hat OpenShift GitOps 1.11 Via RHSA-2024:4626 https://access.redhat.com/errata/RHSA-2024:4626
This issue has been addressed in the following products: RHEL-9-CNV-4.16 Via RHSA-2024:5054 https://access.redhat.com/errata/RHSA-2024:5054
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:5422 https://access.redhat.com/errata/RHSA-2024:5422
This issue has been addressed in the following products: OPENSHIFT-BUILDS-1.1-RHEL-8 Via RHSA-2024:6221 https://access.redhat.com/errata/RHSA-2024:6221
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:6004 https://access.redhat.com/errata/RHSA-2024:6004
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:6409 https://access.redhat.com/errata/RHSA-2024:6409
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:6824 https://access.redhat.com/errata/RHSA-2024:6824
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:3717 https://access.redhat.com/errata/RHSA-2024:3717
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:3718 https://access.redhat.com/errata/RHSA-2024:3718
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:7184 https://access.redhat.com/errata/RHSA-2024:7184
This issue has been addressed in the following products: CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 Via RHSA-2024:8040 https://access.redhat.com/errata/RHSA-2024:8040
This issue has been addressed in the following products: RODOO-1.2-RHEL-9 Via RHSA-2024:7548 https://access.redhat.com/errata/RHSA-2024:7548
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:7922 https://access.redhat.com/errata/RHSA-2024:7922
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:8434 https://access.redhat.com/errata/RHSA-2024:8434
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:8415 https://access.redhat.com/errata/RHSA-2024:8415
This issue has been addressed in the following products: RHODF-4.17-RHEL-9 Via RHSA-2024:8676 https://access.redhat.com/errata/RHSA-2024:8676
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:9615 https://access.redhat.com/errata/RHSA-2024:9615
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:10147 https://access.redhat.com/errata/RHSA-2024:10147
This issue has been addressed in the following products: KDO-5.0-RHEL-9 Via RHSA-2024:8704 https://access.redhat.com/errata/RHSA-2024:8704
This issue has been addressed in the following products: RHOSS-1.35-RHEL-8 Via RHSA-2025:0664 https://access.redhat.com/errata/RHSA-2025:0664
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2025:0654 https://access.redhat.com/errata/RHSA-2025:0654
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2024:6122 https://access.redhat.com/errata/RHSA-2024:6122
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2025:2449 https://access.redhat.com/errata/RHSA-2025:2449
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2025:4204 https://access.redhat.com/errata/RHSA-2025:4204
This issue has been addressed in the following products: Red Hat Ceph Storage 8.1 Via RHSA-2025:9775 https://access.redhat.com/errata/RHSA-2025:9775