RHSA-2023:0930MediumCVSS 7.5

Red Hat Security Advisory: Logging Subsystem 5.5.8 - Red Hat OpenShift

Published
March 8, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (2)

CVE-2022-24999 →CVE-2022-41717 →

📋 Description

CVE-2022-24999 — express: "qs" prototype poisoning causes the hang of the node process CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products64

  • RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:37b6ad91114effd11b2701ccb89955bc53e124f48f16c84ffa0762e650203074_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:04d9b4e5635da41abb5abc5cab94ba8adc9ef974f0f2a8d0bd75aae8c4faf077_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:308bf7bffef3c969bb8d2bf02d516bf50a90f56fc700ae97d41bf3083ddc4f53_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:7333f1d60445adac0776fa4362ac2c5212faafe26d15da1e5f9b8fd3908cdf74_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:fef2924d6f8df4c405b474cd3d438ce8252f259c3803aeca37b6f994ceba3f5f_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:f6af35418dc282c51902b462c03a6fe62d38d0ec83b9fd7c95cee754377b24af_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:0599ae2e322dafeef0293ccb97feb4a0a7778575143a6dda3a06bdb490f179e3_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:a06d622a0e554353edbe29e46075f6ff383cb5bb008cd21521a0f3b4834a264a_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:d7575d0b9379fe3c69b0b8ea76bfd497dc2767acdd6f7c35550be08cc474fb29_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:fd1a319ecd675325f297dcb670f83ae809d82beddc10f99649b7fed05b32b3eb_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:05e660bed7bf8c3bb0c0cec2f377f1cd7da6a2619fd51d89b13afc839e6e34ad_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:1f72b33596d3a4fa61843ecfa59b70f68042df7c7fb8f367ac7d1983d19877da_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:6c2fce66b366d763f3a9c5242eba1604e19be44be45547748aab969d50559dec_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:71273bfac1b8d72f81e863681f329b2c834ac3b9b7797cccbf6ffb23efad8b0f_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:08808e86c1c4a6f1e64800760b3ea3b93d90a3215de920fddcadb7a5b29fb82e_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:3776dde25b75ec53b1172d175dcf00a8856e2fb97a9971047202b5cc0efb51be_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:ac76f4d5a07431295a760ea4892f8c6704de1a4d9959ea79568abd33c6f16550_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:f4565e374f73d72f720e571742ba6598ab4499fa0cca17cf3fa3078d0b9a6f37_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:364a0aeb3fbe41cb4563abe282eea246815996cee862a472090e3e2a3fb2b877_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:378d1d80a68f0c18800706a1d35e7808e7215914e8ae19890e35d4387481c078_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:48b65412b9d438362cfa492eeca2130f87997e22630668ff2b1b1c5a831ebe6e_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:b12aaab8e5ef6ec47539183283161348f314d05f56de672d34a6df576da905c8_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:0181f1dc2089fd0bd3ab9f22ea399a1750c6e5657bacefc4226ac3ea59debd44_amd64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:0e831cf4a68dcb115710ae1996043ea2ce22849e55bc214e0bafb616fe8ed497_arm64 as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:6b503da1639b35cab5ff76bd8058026875a9b2a0c6fc0b6df62c1fefe016345a_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:c440a0e7ce359b7c7649c7522540689c831c48f51407594a6bf4b0776ff3d104_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:7857d67e9f47c9caba32bd73271fcbfafd00047ea97956f065a39ba8782d44a3_ppc64le as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:7eb9000152182b004c4dddf1d5bd90eab32f5d11eac80670710a660c35dfa105_s390x as a component of RHOL 5.5 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:a40fd7ced648e328d9e122ea1239816e26744a2289b560c636461a737f814199_arm64 as a component of RHOL 5.5 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.5, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html

🔗 References (6)