RHSA-2022:6182MediumCVSS 7.5

Red Hat Security Advisory: Openshift Logging Security and Bug Fix update (5.3.11)

Published
September 6, 2022
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2022-30631 →

📋 Description

CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products27

  • OpenShift Logging 5.3
  • openshift-logging/cluster-logging-operator-bundle@sha256:d0ca2c4852e2d50370ce3f89d0cdbd88d7335dffdb61efa851bd592f366fbb2d_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:0749ee12ad2ab9d6e71b898aea4a67606b8780959c17df724f6cc38fc12aa6f7_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:6daf6ff7bd0f172d95e55174548e1d981a3a3700ff54c856aee0dce577da22ab_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:f77acdc83fad28592ac312c6f11bde7d620c4e1bae8050dbf8bae84b725eb47c_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-operator-bundle@sha256:df535a419494ade58a9793e3e34a1085ae888e9e88856d4675e802c5aee4bc5f_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:99a84a10727cefe0258cb6dd374907acfbffb94b50d3e06c67754448081c1fe5_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:ddd303798772f80dc30988d4336ad11ce8f584d1363f82dc6c5eede0b702ce63_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:e6d0043d77f74fd53c9caa62f4acca09d8d25eb8c57337a432d56d0b5889c769_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:809665b25c41c63de7e946ba656a10918e0ac9ee34c4abee0a5fd20f47712a78_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:8719d4c30ef5659571504c2c4c112448bbb4c267858386c79f41057446e2989d_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e84489acde7eaa7e2a24c8db9efe42c6b4d6de1f1ffcd8811b9985d05fdb65ca_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:7180379daddaf85513b7fb62baef880e1f704c80b6cd47130a4ab42cc249f581_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:bd0b167381d39610a0dee6b5e5403f7a95e33db0a2847298053e587df847925d_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:e496762d56921370b5c0408d0999d70c98e2368ffa1d46f58eda9b722441214d_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:45a1c1bc47bc1521bc7ab44593cbb8c1d8c1edb738bcba4a9c9167c0dcecc849_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:c96e48d0947af88a719bdec0c329043cafc3cf48140a5c3e88676d373b4812e0_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:fb84b8b23ec93f1023d8386eb9f4dec3102a31eba80c3d7322768ef25efc30b0_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:13a1c3142e1e17991e49918c10cfe587bd9b25cfc448c09520e9eadbbf430225_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:767e98cf865a14e7bfc1adf56b49e4de63a1f67ff3d23591f5005a6c7a745712_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:fa8565b990b4c9dc12f0aa7443d30285898af84d70521d7c90605f1a5af825a2_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:18a8f9984c86db98e29326d37079d543b01af13f6a1b8f95babbc6daa953a1b7_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:48fc0f50c5daa5654219b2823515247f3ba15c07a452e1cc3be59bd4959d8c95_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:b00317fac5f26ed36703518d34f2a3b4e9bcffc1049e2199982afacf9039b6a4_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:cd8cda66685985ba68da788890675f87df7f3650dea4453831ec60ca392b0456_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:d3d9c4181a3ee0221cbf292e4e151d71c7c3f6cd862967fad6734d8347625b09_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:e1722642e3af5d9645322f3e999d863b2065cb036a4792e01919dfd3169e953b_s390x as a component of OpenShift Logging 5.3

✅ Remediation

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-upgrading.html

🔗 References (4)