RHSA-2024:2092MediumCVSS 7.0

Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.6.18

Published
May 1, 2024
Last Modified
October 15, 2026

🔗 CVE IDs covered (5)

CVE-2023-38546 →CVE-2023-46218 →CVE-2021-43618 →CVE-2022-48624 →CVE-2023-28322 →

📋 Description

CVE-2021-43618 — gmp: Integer overflow and resultant buffer overflow via crafted input CVE-2022-48624 — less: missing quoting of shell metacharacters in LESSCLOSE handling CVE-2023-28322 — curl: more POST-after-PUT confusion CVE-2023-38546 — curl: cookie injection with none file CVE-2023-46218 — curl: information disclosure by exploiting a mixed case flaw

🎯 Affected products64

  • RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le as a component of RHOL 5.6 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.6, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html

🔗 References (8)