RHSA-2022:6183MediumCVSS 7.5

Red Hat Security Advisory: Logging Subsystem 5.4.5 Security and Bug Fix Update

Published
September 6, 2022
Last Modified
September 14, 2026

🔗 CVE IDs covered (3)

CVE-2022-1705 →CVE-2022-30631 →CVE-2022-32148 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products60

  • RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:93356d20f29aabbfd37f142610bd59ba1cb20c92f4ae63acdaf3cbd3b61766d0_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:245771eda4b8a0a5c80c862b0ec2cfe590e8a4bf9b3ba7319a4bbd8740d0acd7_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:2d891f410071dfb6b28321e1fb20732a1064a3f29c3c8160fdeae9d3c5396204_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:870e1047e82c87cb757995f3d70e2ce59f4fe97aab9de06005823634d060da7f_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:fa3a08f2a70541ecd4add8e2d2812faf075fb4b4f59b57aad25f322caa872b20_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:1ec714eecbc7be802cc0353baaadf26e7bf6b2da0ee37430d34beca7325a1ff4_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:0e268416f6f15ed3895faf19f77ce94f53011d05250b0ef405492392f50f3c50_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:86ab3cca03deb969093d617135882f28a66cd6db212ca71012303c50e5b1fda8_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b6ccb4e96486e9670a199737a5647b0b520efc5784258cc8e0489ab1936e5d34_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:ba88ce762bc1c4e4be6d47940ae79c5090cbee1cbfcc4475ee20e6aa4c81c70e_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:0feef8cee2721b635beda6b2d500ef9bbec17685f8cfe998688d8231727fccd8_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:3733f04a74d73ab4fd07df8076eca920c92e0bc8cbf7f50a7c58ad99fe6dd6cb_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:4fe5caf8451c3ceff4f6af2297c8a4d61def09d5c81f1faa0f93a6529e3fe6d3_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:dea28c8bb7e8175e60a89790399448dabea6a5358f0f7e6f9b60f1674ea280c2_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:6352f52bd2ebc495411a15d1c7a19fb58573f434c3a2f5cfcc07aedf6a3ee9f9_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:74da7f9790d3649733df52e30189e7f79cae6e54cf7b94f056f8d14070ce3ee8_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:97df2e3668ef5233cf8362b83b9a896c04dd49e8b98fe2c54d9d2fd175c9e85e_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:a4481b560994e260f80431061db6409be5ff34dacad8cc4bd5d5c31616d2c3f5_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:071d75f8fbdf932be5824ae7e2b447cd256c9049d5f7f4bc420be15c773ff819_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:4e0ae8756a26dee4dc36153c034bb2f5a055d2525655b8fa3214ed904eb7f7cc_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:9727fb8c5eea6d06868d5b632b20197f2199bbf2812ba009d053bfef7b392d6d_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:c40273f64d0bc9d4550f029eec53415d59dc2b07ca97c1ac1f34264c3348be12_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:23fc876085821004d2a06bd3c6c5b6796b38e1f075a415234d61bbcc5cb6a2a0_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:996221e55c01b2abc365449259d2050df5bedc46ff9c95e2d24bb79559aaaca5_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:a1a61a072a56e83355eec2a6b9a6d4bbf6ccbc3b48303b8d8a5047cb5334d3d5_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:ba685a519da9c17f1ee17b06ed0110fff57e6d99b38020dd606c7bcbcc25777c_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:45ced4eb54e534a3d587e9a6b98f8a76e2a5443985a961aa58fb8603600dbf47_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:681bf5787a75b2209a8baf3c16ef1401a5dea9435597dc8eb0fdcbb8acff737b_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:847aef5d2d106cb2c2817a36060a37510dabb444080b7f89d1014e07ade58c5d_arm64 as a component of RHOL 5.4 for RHEL 8
  • +30 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.10/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.4, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.10/logging/cluster-logging-upgrading.html

🔗 References (10)