RHSA-2023:3998MediumCVSS 7.5

Red Hat Security Advisory: Logging Subsystem 5.7.3 - Red Hat OpenShift security update

Published
July 12, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2023-26115 →CVE-2023-26136 →

📋 Description

CVE-2023-26115 — word-wrap: ReDoS CVE-2023-26136 — tough-cookie: prototype pollution in cookie memstore

🎯 Affected products64

  • RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:dbeee2a22f408eaaa8c36efd07b54c3fcfc29de0d22f1b2ab52f66cfe7de75b0_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:1aa92ea5423f97f33a5696e7a936a18433211bdf46037e2087dc4b8359bbbedd_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:25b4eccbc013910c53f83f6b4199043cd81a438e893ae4410832928d69ceb78a_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:44333474a7390a8e2a5269a40cc1b55b7e52c3fdeacfab7e41bb0741b163eea3_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:cc53d46b4adba475a55f28e57692e245d04ba48f2511df102cbefa7fe0919ecf_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:1340c0cdcbd62207c8923d9b3eff883b6163d75303547551053951d049723653_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b261071a410b5a87f02ded641b6fca2ca46794c301ac51b9b1a476e5e580e597_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:c74a18e981756e2021247b83713f27f3442646fd3ae6ed7ba7f0a00f239760ef_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:cdf7d7a3d388f9bd4ee34e05d24debed3d72c1d021f7754d648dba2285a97d9c_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:d2813e890e74f89a0b6a9972d2d5e24824c20a3863934fc7182c7a9f216532a0_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:3ed3456206ff4a8d31c7e8de169d74f224b1e6477c69a284839c46baa539a478_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:58ffa5355969535fe4911b00a7a8ec4fbc3daf44457397f411f9d1d0e99d2eab_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:cf1f974d85b790f6b1e5aa1e574d56191c668ef4adf2634b29f26f9bf28381b6_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:d7c7645cc9b052054c973959599d5676084cdc7ad10a4b037207c7b1b453ccba_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:4fdca7719007c06b5b749a4c89f80f6c9056150f9e60e00933c2c0ee1b7b6441_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:7af0fa05193b2f75a270c16355bcce6d2117183d59f5ed4d040d5a8e7d40e610_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:df161e83a11d953b4867faad7079fed1eead2e8fc727902b7ff9671f8d4b1c5d_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:f2d5044bc2af0ec3e78732ae8785d217e80ff18332fca0629ca06c7d481a0d9a_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:85fabbd04539191db4d739a1af06542d018cb60d1f013344997e469b85d3c623_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:9d6f7a8aa0a62965207bb275a33412ff3d11488813822e7752ec891289c01fa7_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:bed88672a11a7ae0a7273778521b8bb160ff5161e624996f09c2b2accf966d5f_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:f457c6d30ba835e7e8bf29de22ca0aa171c48ac91690ec69b52d1bab865762c2_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:401e04d0b993745703b300bf05d24321f1af71131fc3cf9d71fdca811cccde7d_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:bbff96a917d870ceb4f2982c9bb94440a163a5b798eac9b5ba012a8a8d6ede6f_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:c1b1303900862a6c41f9e2640021207c6b63203ede686090f62237621a0cbe43_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:ef813c004ee3a799fdcb14d19f75271980a5b126125f2e2f4a6c36bf61fbc300_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:403c0dd709adab3bc11330a6939e587dea1739cd5670965467f4760530f8df48_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:7123433d58b6579455cc263f19c85b63ea951d89f66e2b733bac98a9b7ceac4b_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:84fb35d90e834c43f5159b21140c8b94c21ea9124449425596799f80c7cd8020_arm64 as a component of RHOL 5.7 for RHEL 8
  • +34 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (19)