RHSA-2024:0695MediumCVSS 5.3
Red Hat Security Advisory: Logging 5.6.16 - Red Hat OpenShift
🔗 CVE IDs covered (1)
📋 Description
CVE-2023-39326 — golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests
🎯 Affected products64
- RHOL 5.6 for RHEL 8
- openshift-logging/cluster-logging-operator-bundle@sha256:edd7c2c4d72c2ffd1905e640eecd67b39dc0e8b4ae8627f08dacc5273172dd80_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:09d162d94c6ea7d95924b0cdc38c93f227084171259bfda676828ea66ac50fbd_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:2e60e8ce9a3e8f00e80b550906241e1b9bfe25e028b474e4ee6a311ad0364451_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:7a5955b5831371a6e88a3d1eae8445cb69921ea96a23774cb42e700ac57f546b_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/cluster-logging-rhel8-operator@sha256:96ca23328dd2487ddb86f64535ab8a13df61bff2b2c3c53a7b2dd24fa2097802_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-operator-bundle@sha256:222dc97a66da5a403062716317a91ac9bf4e614a95e12c224abef077f05ac9ea_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:0870ada19aa90a4d4aa485193d6cb3823fac688488d970acabe489d4b40ad9de_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:507bf73e22962a1f016dc5d3222743a28b302ca62a389e3367dc8b28a9492390_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:e7b3655b81bb8e89f3cbf713c652c0ae9824e0518a71379e11a514e461257743_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-proxy-rhel8@sha256:f88432037fe9d93068ef3fb89191c248a2656fd2bd028613b6706a260e1d556e_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:9895e52efc12e8c119f0546413bb5d6b2eb3c4f00428df4e3b712d568c463034_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:c963696c3d048fc9de3968f6bbec2dc47788a9ec44afa53b62db5c9a0148c140_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch-rhel8-operator@sha256:caf95d55e705ffcefa3387822ef0ca0c102e0c4b8c5ac7e7527559822f25a1c8_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:0116421b2debc8d42d59e755fdaf0fa7954fbceec5572681b0d7a7ed040a95a7_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:2d6d3ff065acedfaf8f240a0640eec6dfdafcbd90e9d141ca280e913259f87c0_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:b703a0a0912b7956dbe02da4b6f31ee372b20f94244ed7b8b8ce260dc3833567_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/elasticsearch6-rhel8@sha256:cf3780141ded99fa44e3aa170ae930ce0c2a7efc6d20e85ddf28943728ef6b40_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:264b9bf82da7a09cb3ba0c291276b6c86957598fbc838b0fabc677a8d0c2c664_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:542ed6049ce4f6bc7bfe5587d16dccd2f7f1bd7ea049eccc1f8dcb8fb0d8c445_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:c4aff891e72e4ff2518d0af6d689fa58a7a493f772d7b9deb19b605930826095_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/eventrouter-rhel8@sha256:c7f4779c7df421415880a8ad13953e309dced0e107e952b27ecbc65fd76de546_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:3d65c73a546b7a1eda2222553286590a38621739c87a45c11896a08891ff8e4f_s390x as a component of RHOL 5.6 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le as a component of RHOL 5.6 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:e5d6949296a00ffe492757c5f9efeae7f323b7090d9b88da799d588cd3f55259_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/fluentd-rhel8@sha256:f13e43d2308755734cc811452d0542ef1e516334e8b64d1a208bfe34baed28b6_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:46bd56f6bcb579aaafbb7d55e176e708204e233c278d6e1b04c82950f8e449da_arm64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:4939034e2900cbbcc92a46b3045e5dc93ae18672b0a1584e384ee2c2121b6713_amd64 as a component of RHOL 5.6 for RHEL 8
- openshift-logging/kibana6-rhel8@sha256:8774a857b7496adbd97e63521aeb717714b1c24e4f27f53833333fd25fb3f405_ppc64le as a component of RHOL 5.6 for RHEL 8
- +34 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is available for this flaw.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2024:0695
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2253330
- externalhttps://issues.redhat.com/browse/LOG-4967
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0695.json