RHSA-2022:6344MediumCVSS 7.5

Red Hat Security Advisory: Logging Subsystem 5.5.1 Security and Bug Fix Update

Published
September 6, 2022
Last Modified
September 30, 2026

🔗 CVE IDs covered (3)

CVE-2022-1705 →CVE-2022-30631 →CVE-2022-32148 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products64

  • RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:a7d097c7f59e7e3827932115e3af8659dd8a5699664ad2addde8bf85f0757de8_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:2d59ea02b8301685eb789bbfe02378a49e7fbc91d87852791b97ccb173bf7668_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:544476eb743b45013d2c961959bc46a93168e430970f77b1c15a04c39034f91a_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:67bfde1c5ebfae146aae4fc38778373b7d834f0018332cdb3a2a734e5bcf0edb_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:77f706ac33b34a3f0d82550a2a2bb7f510e52b4b210cddca6f4b4eafa77beee0_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:12340cf54db5a79490544f60370c858d383c8132b3fa6cb7d5d44cab2658a3aa_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:4ce63bcc2bfb7a12f7502bcbfde4cd98d5818bca155aa0db063f1077910feacb_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:600fef03d078547801b8aed8f3dd1cf0fb8450815528e1bbeb5e3e695778ab40_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:c842befed3c1300828098c6eddc1548cc01a66e6fc5fe82ac88f29a6e16f6f89_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:ca8a4fe474160aed7bdaa13429ff8d52633eeee77b16a7ebadc5a44ee4e4e057_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:4fdec436aaab695bfd013ffaecbba92bc2903f87cb1565e13e8fcc664576bde8_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:5fa4a511e2b6f389b6cbbde4ada7e5bf6c2a4e7f4edcf527e29da77e9bd91be5_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:7310047975a3b2af0edffebed3920d2fb1e76ba826084d87bbb5f20dc3ebfaf3_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:d52d17e93aac1b7915b02cd1ff742fde0c479a68d3be562f03df488139819f8e_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:417ebbbaf684f1968e5a3d438f12f17b90315015fde6dd372330451c0759ca5b_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:ae629ddcf640a96d292b9e28665dbaea8b01a36a1b5cb35fd6d1099f9daebe4b_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:c5784fc0a27769499a36819c1ca82488a19c1d2878f7dd67fe985c5b09226d74_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:de443bcf2ab07a0db72d1ef5447e92d9ab04b28eae98d1f3dcc443057f75e12a_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:71dbb0646b147374c0af51fbec3df0caedaa5def05522e90c6fc254115458bdc_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:b15e8cf1b4228e4773210e0829dee8944eee708c752f11f7cad9014214d563b7_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:de62972211813bae9d43d8fd13b3011d13f7214dbecd3d6b2b300d83e56ba9fc_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:f4e6a9487e332db9e476a99e4eaecabfda439ff304ce6ace158e56822a750585_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:16a1e34b761d0d61e743d7a99672d866aaf8d161e540a28c7a8611e81c6d3534_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:3e813bdf76ac010ba3f7bba5c3f057cb59ed38531a082a3532490ee393041613_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:5f08dc24abc3b23c0b51076fdb92395cfe9189289fa2f1e5903e90d57de66124_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:637577b92cdd5daad8fd67db489e631587c9fbffabbe04578a50b71b1279b839_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:69313dc0314eecc136358da4ac0ae4ca316c058cafac2d9a8d44ce81d03ad278_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:8a7094de78ed14972dd7c32d294583e76f0f3fee328c61e2e5ce73782f620435_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:90e9c04c410a9abaf877d088e2f234df2677396e9091b13d9db94c01bd3b8ac9_ppc64le as a component of RHOL 5.5 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.5, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html

🔗 References (9)