RHSA-2024:10988HighCVSS 8.0

Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27

Published
January 15, 2025
Last Modified
August 17, 2026

🔗 CVE IDs covered (1)

CVE-2024-47875 →

📋 Description

CVE-2024-47875 — dompurify: nesting-based mutation XSS vulnerability

🎯 Affected products64

  • RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:2e00756b71612c2d08cb9f9f1ba7bb9507a460ccb9c0c4c82458f8fc42a72dfd_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:15a96df5ea7cd1046a2814b46e540ea0ae31f3c819285f1a29a2d6e24ce35740_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:897e5220fd28e5ae8bf4c2af746e43eb7d121f9f9929735edb7f2c4cd56d5fd9_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:bd7a3c5ee7cd28b89dcf215818f7f10b360c1b91bda152a3169dd96c6c7d6f32_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:c935a5b7ac52794faa082ed4af1ad33023142649bced40ef68d9f3524a54c31c_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:8e3bbb5532dd2b4531c940eaca72eac72caa8e845fe4bbe3310bc82760a9a8af_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:1333d71476a58eded72ffd77c12a26329f13b037dd49f073862d3a3eadce0f2d_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:3024818a3ca77f5351877cc72924fdf824eba6defb4be080003d03334aba131c_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b01d8f4a9c22decf6a7f5b90102e875f09da97f687dee9cd26044384b513afc2_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:d8d7786e4fbadd954777bb20e8da1f82bd79aa36e1c95d46d286974c7233114a_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:6cef416969162696d637aa40de200b5926eaa8cff07621392147fe338e40610e_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:83fde07cd0688abff5a6527e6fa76adab13d2c4db534c89955ef34b0ca706f43_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:d7c3a9ea153838949455419541456caad8432ec81fd279f694f6cee03374d50f_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:edef1b7e0d9b4c60ec91d572927feb4d6208e0eef81d3de6b1b5c10dda828935_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:82346c7142795d09a6e6e057edcbe6af08481dd243e927970fac762ae43348ac_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:bb3b67b37cebd13f8e7623043eab4c17ef2e8be2b34407cee154037d53c8fc8a_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:cffe2b974c01b90354dee33bf25bf4031ad59a41353de2035cb88a27f59fa7a4_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:d3d9fdb4ba1c333b86e725434d83cc4d80ab2dd3dec1008ee4806f8c32d4d8dc_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:7545cc4f956931c0b94b91924411700cd15ea09a36431a9704bbc01079c5cc6f_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:ad09dff23d8ea0cdfec735667381fb6d337172b14a38ae62c162539d7a848898_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:d2025015086f1d133e48ad8ab11755c459d555a960d1faa98ae7ff7c8e4c7001_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:e3d38f53d567c627332670412ac22b1ed860a72595959cb810b9f022ebf57371_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:07f8be119ffc987a1def8a352fd65333b6d91f89935b3540ae6af6f1f51b7c12_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:1192ec065c0f370676f2ae985c48bec7a227cd2ad904b241b990e5edffebf4e7_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:2ebf1c87d632c563050f3f5b5ced103f3275662cd44f3da77fd6428fd7d40ee3_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:6d04672d8e96e199018a0e6b3781475cea0fe0032d4ef66feff2999d6631b453_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:17ed92de8fe4c80b45efe3710ade28d1058569725ed3a826774908580aa3cb0d_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:8c23c358103bc35851dd5e23a648f950950f24488f475ce53dd0fa314eee2a3d_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:bea734b98fd4c0123eb4803d8a0c9af797b384c3bf437aa02bb572588a04c805_s390x as a component of RHOL 5.6 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.6, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (3)