RHSA-2022:5909MediumCVSS 7.5

Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.2.13)

Published
August 4, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products27

  • OpenShift Logging 5.2
  • openshift-logging/cluster-logging-operator-bundle@sha256:855381b23c325ada7dcf34c407f002e2a7e93cb624b7b6297f8b9e92a5e3f39c_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:39dfd041b722ec9abf2efe662968d0a550e06d6f821b5db5b49081f88ab1f6d5_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:64ca2fad1e9e87857fb684f5272ebea197b645acb17dd9e8b0e951ee5b29cc16_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:c9e31fed96b839ece2d9b5cbf3f6ba2de95ef6da10f47df4992f21ed2836b356_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-operator-bundle@sha256:f11fa9a1ac569665c0eff1804da8db614dfc12f310f1e530bd6b770669ad5c27_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:4f9233ef16af6b2c586e633f44c09a35938a5af776cf617bb8b1e8b92905b587_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b4e8118ce3c6db1de05b27e6569f0a0a6b1f4a69d63e3b186c4137a4e879b50b_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:ba11beba8fa10271ef22ac87451dd63d48090f9bdb595b017b1606fdb7b98f3d_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:0d633cac2f5532b154160496158fd4ad79261d4297cc1ec65d89e5f15f6ae8e7_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:9124a3494c258608016f617f82983563cceba0710390de4ff43dbac174608d6d_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:b2be393a9eaf1914a29c7b8d32fdca3f6359cc1de1fd4993850a91cbeba18263_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:6447b662b055fbc87e1820b3e3883090e6fd48b308ab77d23accdbdf4bb71fd8_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:e1457b0db837645a9cb0608c8f1b315e8998fa87a989fe54df110fa08a9c2be8_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:f074ca82ef155f7f1e3232cc0071f5b082d17323d3b060e4601b9930f89e2199_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:15b3bbcc7bd73cdb5e7eae3039a2bb8039b43525798061a9e443a58028dd8018_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:8446f9e43c11ecc05372ae578136a668db1f0e6deb1e6ecb74a5042a051ba8c9_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:c6da531ffd8ebfe4ff02deee6a0be0688a9569c9340bf0237ef792c02d9459d4_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:05aea6a46b111d07c4ef754e8158861b395d43d63ea1b6e5c5dc790cddb751a5_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:295defcf75a46b082e215a6b7aaa29f14dcf5be03335a9567ca36fc3307e82b8_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:7543a788626b61e4bbab1600977721772ad53db026c8c869e53a0eaa213e4f9b_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:61de6296d84ed623e6f679d1ea888b62ec2c6ced791882d4aceb00a31b93aab0_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:a16b9ac59c295ec205d62753f19b0e8c3471531ecbc65206fed367f0af1643f1_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:c5f488ae592f2eb453d43cb76db4bf38dd052c8103eb74d73c0db8ed2392f389_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:1c349d4da14ba9c6733b96b56bb6ac5959efe27498a58e439aef347c4595dd79_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:5c48b24b4659340d67ccfd372e3fe156450509e7afbcc267f8497526f4cda86b_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:d44a42ad50be501bcb13b43a3fb32e23832c58c8a37c366116cd1a74e7ffc250_ppc64le as a component of OpenShift Logging 5.2

✅ Remediation

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.8/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.2, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.8/logging/cluster-logging-upgrading.html

🔗 References (4)