RHSA-2022:6560MediumCVSS 7.5

Red Hat Security Advisory: Openshift Logging Bug Fix Release and Security Update (5.3.12)

Published
September 26, 2022
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2022-30631 →

📋 Description

CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products27

  • OpenShift Logging 5.3
  • openshift-logging/cluster-logging-operator-bundle@sha256:37eea6f790604f1752df40e532fe10adc0b3b491f9177facf238da88f88d26e3_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:8624ee91b9351a1bb66a4dfc1e1b25730c1f52dd42152b0852d78674dcf6dca2_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:b47333c0cbfa4e92d50264df1473eb99437a5584cd6ebb6cfc6ae88e90af82e3_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/cluster-logging-rhel8-operator@sha256:e0da6bf1ac54febfb77ca9f1c19337551b1a7c6c55ec440b85be2c2e28ba5e4e_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-operator-bundle@sha256:c14459973d3e9d563c1a2b9421d43a976b9690ab86a11b6e4b490ee8e95213ae_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:96d5c193e216cdb6a6eb762f419132c94c6d68034fc3d1c194df1b2a13f2aedb_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:dd0ec978c68dee9bf5de1b59107cd80d56f97d16888b092a58655844621adcdf_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:f80dadc60a394ebe2f6ae12077d7cd7d515f66ad6684a669651bba394cc8dea8_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:276194dd7ea4bf90ec8f61d1af07e9027bec9be664e3924c94eedbe06df94dd8_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:a1fdb816c54c8d2691f2d25628f6641eaa9653084e8624c3eabab7c393659f33_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch-rhel8-operator@sha256:bdbe2209cccb1ad565bf484ed9758bf0de0b64418a6adaed6cc9e8bd3ec34c38_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:3775363345239414e41ca16dc707ee33579a7ae0da355ef5c0a79ca654913b2c_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:8ebfe4dba1b62a34a640a463174f57e2ff5b9ee4f1a458e3953a2ec60810ac1a_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/elasticsearch6-rhel8@sha256:f826ac6ac0bd34ffae0949cc3ef77c2d4ad104b2ed077e3635d94c241cff401f_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:37f3395b822b0abf2b429c6e8ee8630b3277e94839dc0be2244ed5bcde1920f4_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:901c6ad79668971df6ee95610f930f29b5919f2155aa490270389229ff9b0c45_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/fluentd-rhel8@sha256:bff015810767d38014c11d6d1f702a1c4433bc4be85900354c8fbd902a37e385_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:8b13221c301c2fc4e903392d312158254aa277152f33488971f1b082f8495fb2_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:d5675d0800fb67d40f68d68f94255ccf93d32ee2a791f05b289bc727cdcaf6bb_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/kibana6-rhel8@sha256:eb9a828945cd517d967741f0cd9c2efd42d46b3d5ae08bfc08c6e5ac46204000_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:2a905a48410ab9908125220289f025255be3dfb4dc25e007d6a67f11a8e4d663_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:503dc2de6cf6e49ab8c09162ea85ae3c834eb4da1593c00b6b139bae90d2302d_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:69c5152856d42de2193d06be9a4fc309711f4d91d0fa05db1cac92ababa5b45d_amd64 as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:381e04249bcf4845b2cc420eed59f0018a7a6023b57cc34a8cfca4ad24fe0656_ppc64le as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:c7ccaa9e38ad0ba6858cf9bd1ec95a120c2e21750767992a41d34ae37b54490b_s390x as a component of OpenShift Logging 5.3
  • openshift-logging/logging-curator5-rhel8@sha256:cbb7acb6ae894893c1c0db6bbfb126722aac0ec6f4d445348e61864bde0b0b20_amd64 as a component of OpenShift Logging 5.3

✅ Remediation

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly, for detailed release notes: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-release-notes.html For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.9/logging/cluster-logging-upgrading.html

🔗 References (4)