RHSA-2022:5908MediumCVSS 7.5

Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.3.10)

Published
August 4, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products27

  • OpenShift Logging 5.3
  • openshift-logging/cluster-logging-operator-bundle@sha256:e6d2af19343a143d8341af8edae10a836cc9dd55f3a26c11d860f347167ab032_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:146cc90c37131996faa904c893f57111e9a621298820f35ab9a8906dc090fa56_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:2310451aa8b11142f632b6327050f166b65f37c6072019ceb5da9448ab79386a_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:2e702a519f72ff4b69d77c6226c23645f7499cf5c3fa25e44804bbb67e9b0e3f_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-operator-bundle@sha256:c45340a9bdd7b544b9410d1c52fa6e9b444571d506aa05d6849281df2014ef1c_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:5830aaf028a6a94ade5bb40840180911dd80ef0dc4eb93080cf8bde3476cd585_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:59c4a4b20ad42a32f09c60fada67a9f20c237e8dce8ece678dced5c37a87b65b_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:81436241c1042cff2523bfcc73d050700efa107b3fb41c0475ae18b4a3b7b43c_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:0d0bd7b54472b47a65480f5b5832b773c5c79161eedbc15cbf80a8615f7d7e47_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:150f56a69ff535982d1af00896a1b0f951cbb75666f9d139811a79b29e86b04b_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:a834960d45d27966bb4f866b87014c02b80c463cf0298fecb2d943b51200d2dd_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:849379f0269df32524a3faeb5c3d57bf75494159d34395b50eb9452611310054_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:8abca8585eff035f45616a265500f2ce06ef4e442f13875b3c21211652bf7f7f_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:9ccdc664571e8253482b1742b3752f8ad97f3a3fe6be3cd8a9daa85d11c10598_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:38cd5c2bac627b8350740f44eb9f3b49edcb178d1bc067d656bbe1edb12439ce_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:59a183a5c3c093f8c3898f136369242a443b39b0093cbd73fa8bdf1322567e59_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:c65a4c8d2038cb26587a16d4c369d19ecbb76dff2ccc1b5496451c058d02abf1_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:a2f2573009880db9e2e21e68c90bbf0d32192774e0bee60d85a9c1117cc096a5_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:b7562f5d22d8860bca1fd0d4dd7610e84153f111aeced03b7c6646495f3ee5a5_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:ece1828d3b83d7d080c14061017a0954454d6eaa1b64cbbe9eeed51d3fbaaa59_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:639c977e126b76ce05dd0a80bd9f771b5830674cc435969c6c2850d1b353b64d_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:6690639a20a9b1f65561bbbd8bd3655ff1bbeeeec4f6382b7ba4b44a07cc77c8_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:7da6192a8a2b5f78296bace749b57a70a09e139abc608b04ad74698960f78c0e_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:363822fd64a18478e51fd30c6851172c4554cff467059e61d643e8d048fe4cec_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:8968f9ce2e74fdc5d8256c5a5c3f34ae6db8f6f86de0149fd66168168df54015_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:cd473c718cf65172a4cfa37c8fe9cbe7ab020bfa0cad3793dd9a51b8e6cb2c9e_ppc64le as a component of OpenShift Logging 5.3

✅ Remediation

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-upgrading.html

🔗 References (4)