RHSA-2023:0632MediumCVSS 10.0

Red Hat Security Advisory: Red Hat OpenShift (Logging Subsystem) security update

Published
February 15, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (2)

CVE-2022-30123 →CVE-2022-41717 →

📋 Description

CVE-2022-30123 — rubygem-rack: crafted requests can cause shell escape sequences CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products60

  • RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:7ab5b5fc788cce18883243acbb5969bced246104636b250484c19c76dd4b93a6_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:1b8bf87ec875fe41a66ea659a6b18c5e5659b316d45eea5ebdee33bae4ef81a1_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:2e002a48fad466ef0ec91bc70090c34d16cc9a13192b43bff5a8d26bad016b1d_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:6852056797fb71905807c327c6eb360ba8c21eaca7d6a56db3fdd40fb1ca8c91_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:b7d74ad5055cde7320b9584fab00b35790034b5946ab5e5b3bb91b9dd53ba5ac_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:aab07bddd4f7f54fa89726a3d06c5fb46aa9949771d937fb26d01c6231868c51_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:0ac7eb6b479a554be15ab61e47d6d7ded410c1ec952d8754fa54f6f3eb16c8c6_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:119afbf853025bba3ed3a06e1ef5dbcc85520053110a9a32f0d19a7792d5ff90_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:361bb98599f559be65a59735307227ff4f80ef4e3ce242b2d09c13b1b3cc1e97_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6383da98645b90f488612d7b9f97de1306e8b1377d42da2c55d3645c051769cd_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:54366435c4fdc0ed60acd5be4b6332a902e04a4983bd11c56f43cb60154ad858_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:91c00457ac77689695a0a419dffeaa27f58a09838d20ba8555536d9aee85606f_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e2feda4d38877bf97f51e6f4d41c03752cabb24e483e508192696c1c6d073370_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:f7b3d237c663055b328ecd74bcce5187adc19bdbe37d2fdd6da568a2160ddfce_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:233e1632804aaf594c5c9765411e64d88e27186e9d7df136c9b2722496dbb891_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:6e3b8c4326a16d1996d63d3139fa8da07f836adb7380eebfd43c04afb5cc8160_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:90882305ff4c797b77fc0017697f408385138e9f436f18ad3f9ede84e3ce8917_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:c7ba034800b2815df849b292f40bb32bd2e6bb5ba4c00a06dfce8bce521facc6_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:288436122a88e3774ed1f67340701552853622ff3d7e93df79064aafc93793a5_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:74d8ac8e86c7117dd879f8dafdb8124786ae0939075da0c6c77e590ec7c2803e_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:de6ee66aac30df18e4fb9d34f316d1220af07bfc64d730eba8381a87f59630e7_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:ecdcab4b6b5192f87209973f9634937b05d3916e5a21fb3be4c75cf40cacaf74_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:3a02e2eb672689fc012b4276291c86aba80677edf88c6e1625e4679d994dc58d_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:5f8e825cb25b65b9b2060fa51d9a611eb4284d62942e119c7172903848bc6915_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:973980c7d40d620669fbc0886c53e7788578916b2799e03a3a7be9c411baefe1_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:a4ac93c66ec44e8af3f1b2e7622b00f2c439b02defaa109fa52b1199af5d7036_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:4843583ba145b008d4117bcf7f24f50d8c67bfa75df0e2b2ac33a76b0dbc79ed_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:5b5205024db71e94e77c0c284af593765685093cfa3e7cdbed1fb1ab1e239270_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:681183bd8845927e77c735a8baa89915e33895f24a2411b683a440ac2d8de077_ppc64le as a component of RHOL 5.4 for RHEL 8
  • +30 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (5)