RHSA-2022:6051HighCVSS 8.3

Red Hat Security Advisory: Logging Subsystem 5.5.0 - Red Hat OpenShift security update

Published
August 18, 2022
Last Modified
August 17, 2026

🔗 CVE IDs covered (4)

CVE-2021-38561 →CVE-2022-0759 →CVE-2022-21698 →CVE-2022-30631 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2022-0759 — kubeclient: kubeconfig parsing error can lead to MITM attacks CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products64

  • RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:b45d27fdcd7f8c574b818fe96b35d54b4039d9638b603e59df18125dfe9e1b9d_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:7bdf236ddcf99e13e7b03eac3665f456ea520ea34658158b37b53f5515ea2941_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:c989e8278a7aa5a42769666251a53bf12cf1004dfe084a08884b72dd80754503_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:d81f213923e8a162eb1a842ed04bedb23e8d069c18857ab63f9770ff222d635d_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:dfd44bf0b81480fc5af46af655474123d1c5335d9e8b363ce9cd2936bd320bea_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:bb9d01a501c0f268fd7ec7d99b5af455bd772dd251d24220e39988dc0e58ba69_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:0653f32f429a2a51e3c24175510482a61aca9ae897934008c7022867a290fffb_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:81949b18210e889ac7d7418d2ce9af7648e65f54daccf94ed372c2d6542921fa_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:c591f62bbb9f0cc726db8fb475217b00f165ac7685d8b25343261d01fe452d17_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:c95c4d82c802b99ca245c27dadf85a5e3a77c135d0987066deb601bbfe766329_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:1d6270489c06783cc427e661b903fffe4a514d115cff35f1b8d69b708c273768_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:5a3b66bd077ee0402fcf70530f3843b51894101e5c88b13467dd9503b834527f_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:7c4af9872c4f6ced3f3751af4cb7f31742d9c760ff04151330132704c4ce61fe_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e29fb87e700f78c9fa05085be6f5e191d840246de0969fb2e52c845a268bf1d1_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:4d31dc8eb58f9355bb98beb4a4544f7d3de3af072e8b7a232ad61f622c44beb2_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:95b249bc9d4cf115f70844235b2e58370d4dd2ace971201bc6518b3d9a40759a_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:b7acb0b482ada86354467bbf0544a61ac385f59c865147cf986f9cb09db663b0_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:cf2bf948529486ad1e61abdc38ed6f9f05733ed6bda441fc10bb88e366429669_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:48b4fe535691ed432867c9bc1ac4ec734f1e6b5ef51d11a702b99f2d1623840f_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:593394515d7cbc4111d1a67703c9c083a8cb6e0d6d6f8e5b914f810e003982ca_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:6002d16f9f652b6c32ff9b53935ba28f94df3de3a0c127316b023a4d22b54cba_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:99d5577d86f78239db33862c6b7c8a7fbdd96094498a54c8e0a1c0c25f877382_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:3317d3fc0bde3446879c47e65412a893d7b8106f7f8efba6dde4a1e04ea090de_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:34de14f3735c84727e3bb6d1a6bb539ca1feb4932a06a6f897e81290e515c76a_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:5e8b7ca30990ee8e13700de3f82572858c563d84609158bc4d167c12d80aee26_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:d6fa8c2547ef2c510233a4fdd598db569e959b64f0f1a373530b33e2c0533ba7_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:1326a7cd7e94f5c4da82643f47767e371127a5644ec0a6f54a82444952f10cc0_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:1b0a964d266938f06fd6983bdd710222b0ce66bb6036ff992186940b31320ff0_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:82f069b742b7151b4e0f5119f100682200fc8b2561e9444132257df28601550c_s390x as a component of RHOL 5.5 for RHEL 8
  • +34 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (85)