RHSA-2024:4785 - Security Advisory

Topic

Network Observability 1.6 for Red Hat OpenShift

Red Hat Product Security has rated this update as having a security impact of
Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Description

Network Observability 1.6.1

Security Fix(es):

• CVE-2024-24789 golang: archive/zip: Incorrect handling of certain ZIP files
• CVE-2024-24790 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Network Observability (NETOBSERV) 1 for RHEL 9 x86_64
• Network Observability (NETOBSERV) for ARM 64 1 for RHEL 9 aarch64
• Network Observability (NETOBSERV) for IBM Power, little endian 1 for RHEL 9 ppc64le
• Network Observability (NETOBSERV) for IBM Z and LinuxONE 1 for RHEL 9 s390x

Fixes

• BZ - 2292668 - CVE-2024-24789 golang: archive/zip: Incorrect handling of certain ZIP files
• BZ - 2292787 - CVE-2024-24790 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
• NETOBSERV-1649 - Follow-up: manage drop metrics via prom
• NETOBSERV-1676 - Sampling > 1 causes disproportionate drops
• NETOBSERV-1697 - ebpf-agent doesn't recognize SRIOV secondary interface if it already exists before agent is deployed
• NETOBSERV-1705 - Zones / Cluster scopes are visible even though not enabled
• NETOBSERV-1706 - Console plugin sometimes shows "ready" error
• NETOBSERV-1720 - Topology: "step into" is broken
• NETOBSERV-1721 - Lokiless topology: "step into" bypasses forbidden scopes
• NETOBSERV-1722 - Topology: group invalidation may cause error to be displayed
• NETOBSERV-1731 - Metrics setting in flowcollector is confusing
• NETOBSERV-1734 - Issues with subnet labels
• NETOBSERV-1743 - DNS latency not populated when privileged

CVEs

• CVE-2024-24789
• CVE-2024-24790

References

• https://access.redhat.com/security/updates/classification/#moderate