RHSA-2022:5556MediumCVSS 7.5

Red Hat Security Advisory: Logging Subsystem 5.4.3 - Red Hat OpenShift security update

Published
July 18, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products60

  • RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:e0f5060a3a33079d3a7065059ee09fd7e6918197cbdafd6f130d9541fb4bdf8e_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:412286eb1a282df321a2fc372e954caa79ab5658239e97c27650e8928f3f3dd0_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:8666a52f0a62724b1ba920bf262ef445c47012b1c3a7084a559332c7bd7f053f_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:af11ef6f99b9cc24338e1055a2798cdefc54f56381a5487e17303d2bf4ca5eec_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:be1a87952f94747a9f7a4ac77800d3971ffdaa34860af4d168d4a8372da58b72_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:6595640c4fb1a554dd9460eec37da84c4a87f876c05c3a158f5c33560ccc7730_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:0ce448067724ab1d369eafe944991f0a0d618ecb830203a7893c2153de09b76c_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:60cfd50a577c5032882a68607c2e8006e443c62ec2f1ec144e966120a083311d_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6df37d6a597336647c514852cd280afcdba2e960901cf05c824542f58813d31a_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:7cd850ee191f53f024c093a9b71d8f61a7de6ff1b5d0dcaf45ef1e08212c6dd3_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:0f8f9b587dc469173e4be6169943d96f68cff42a49acf40d56a6a4ff1341696b_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:56d31fb7f9b94018267696df2a2efa497997c743361ab921c107bfcbad7047a0_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e081a8d8ece5fe59a8e61459887accb9d5050d5eaf775edf6bbb117cadb89c0e_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:fe59fbf37855a870f6955bbc8e190965670f8df413b70cfacaf8c8493585a809_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:1ea894d436235c11a1a69a262887e51a700f771e9b254535959b6b989addf83b_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:431a5064a4fffd97e11e9509eaf3abf24df85467153d0c68151fb0fe5d802bdc_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:823787b313a31c0bb4dfa594bdd947f0be3386a17417e0507e4498c1768a323a_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:c1b2b31af6e69d35c408f29f1439f5dad45a42fcad826053b3f535e6ee9f1c79_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:6b444275f8acf37e12aa487ce61345a20f51b667e59598c0a6bcbafb6e11bf4c_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:9107826a33b1543ff81ace40d366dcdac0ac9e5c94d552f30fb97e7e5ed1dc66_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:b9de2fd2c1a7f917989ee052d69d3e1815e4bdfdce171ab8e1ad130fd33f854e_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:e4b97504a4f738a5e4663aa5153de60a044db7a5f9aeadaa7c4bd8be21d8fac2_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:2b6d43e0c22a3be08d8f15af60f4fab93ac5cd9d14b6644dcf83b15fb22e20eb_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:858e8ad430b88e1d6aa117e3077a0c6823cd5b996d58558d3a107e8002b9fb94_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:86abe9a1ff8a869efd8c25bf60b524c235b2829e4e016a5b170882d001236896_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:8b999549444968b0dc477e1233b49065aec1fc6e78b611be1a8d9e6be3bc3ad4_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:9d51d62776a7ea8a2f9ec065970806d79787e6f2f90a8fa659607ec44832a1fd_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:bc5ab07c9bb0d53912faaafa6148fff2b7bbc96170cb172c55b3f2aeb4081111_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:cb22f5072c613aa30c81904b2e4e6792852c8a77c19bc7c2b3502c2ccc443362_arm64 as a component of RHOL 5.4 for RHEL 8
  • +30 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.10/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.4, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.10/logging/cluster-logging-upgrading.html

🔗 References (12)