RHSA-2024:0694MediumCVSS 5.3
Red Hat Security Advisory: Logging Subsystem 5.7.11 - Red Hat OpenShift
🔗 CVE IDs covered (1)
📋 Description
CVE-2023-39326 — golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests
🎯 Affected products64
- RHOL 5.7 for RHEL 8
- openshift-logging/cluster-logging-operator-bundle@sha256:57bac6d1c8adf6395831d689d068e213ad6642e2a31e97c7a008ebcd436b052e_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:5db1d1beba162705150d693e154ca4e016810e9e01d5286da64730c0b4a8e405_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:92366f9c7d6606dd01ad6b4a1fc4af1b53df81ae4fcc598ae61198de682a6663_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:c647c98954c50546c5e011e90e68f738f052333ae4c070a1afcf6cf6454a5d52_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:e31686d4d84f746db23c439d1af8cf59d8e35f387e596af590bbb96e09f7e88b_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-operator-bundle@sha256:4cde2750900bdb3ce183f1b6303da9b741ffad23f37609b8a20a7cd74e101de6_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:7b1f36ca9e664817ef85cddf8edbc222eab2c932de09bffef439f93ea36bf5a3_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:964cd8176522cc41b2ac26992e81da35aa2bf54be0690ff14643ea3726fb451b_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:d44e7783c3eff22aa5eca981013336925e6f21cdc931bc22b826e28825ff9f18_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:ef578edda1a905c71e67481937ae272147d86b065a41d8bb94ba5b0cf6a3cf03_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:27192d0a67acd55d457548a198f94339460731234c0dd2c723f6ebe132607402_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:a5209b13fff371044471598deddf0f25153c754a8dbfd9a1569613edda2a9697_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:bd8cc9571f6d2bd92b5c27ef50dc3b47fa1d9efaba0ebba3023c5fc2704fb250_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:c282047690e6405f3c2faf0d543fd7f4703eed608823d9fb0f132d3d404d19d1_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:12001f4b8ea48f225dd8d349af113946bf88ab6a41a27471a023ba1ed2b48548_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:a2f174857a15ab37bbb5430492603cb1e35707e0798a37f352a6dfc20f291e5e_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:cd5dacdb9acb3ab8eeb1141e47bf85dd0c198aafbc3fb9893e0599295297c45f_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:d588365b9c1822e00888a9ceee6ebe20a3b865959cc8c935265a098f65bdd282_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:145426e573f67ae25606639f4f7bd565a47d59a3f5a5af7054f09383fd8371ab_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:374485b024c738fe206be08ea0a5ec2ea4edde5154a472c867c3a951f73f65bc_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:9ac84cce893f0efb4833278ac6c50950e5841180c9a1db73e0e1186df412788d_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:bf87a3a3ccfc1bd074d4e8e749be07587841a99c97b72b6f71af78b13bd6f77b_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:0bf141709d11fbe54633cd427edfc4927069be33a3a671c1f90ea14981608576_ppc64le as a component of RHOL 5.7 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:1d22b7726d80c6c7d0984a62789a9f9984be9ebb51997a5758755ea8fede86bf_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:db34dafe1c4cab4004128ad873cb9e8b69d0252c338d4f4bee3841434cb48c79_amd64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:ff14c7198f0e0abe3e93ce7970b3dbd6e674fec6f2772a8b8ac77c65656f3c7e_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x as a component of RHOL 5.7 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:f47eabe33c545a3346a7366c0a7ddfd1901c482846550e9c40062372ed568ae7_arm64 as a component of RHOL 5.7 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:fc763b948933e00096c5a7d8661e603a3eca431f9a69e7449fc0aacaeb34813a_amd64 as a component of RHOL 5.7 for RHEL 8
- +34 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available for this flaw.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2024:0694
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2253330
- externalhttps://issues.redhat.com/browse/LOG-4968
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0694.json