RHSA-2024:2929HighCVSS 7.5

Red Hat Security Advisory: logging for Red Hat OpenShift security update

Published
May 23, 2024
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products64

  • RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:1ac77ae26db0a0a62541ea3997d43d06b6b77cba6b3cbb62630723d731c088c1_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:187ac933f9ec7661a44a7170f57af98e3f603cff7104ec1aa4f9d64ca38f4565_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:26a2c965d80a687efe8abf20098574eced63d33b113426bbf02676a91cdaec81_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:771510bc988b79286869d5f501e7361191c0199650dd2875a967580b526db3aa_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:c0ab5ca070538ba1c929ae859394d469365d880ada0406c58aba47cd570b166b_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:d1882ce4aceb2915b624f244b43fcf27f310a6627b255e7a39d76cd8bcb4fbbb_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:00ffe6bcfecf07a92b3b22c1f4ae4bd081f58d60bd287e30bfbaff9db4e08e2d_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:16d87d17f2ccf3037a159c4a1edf6d0e0b9af5adc8da9b4f2081f5b34c8d8928_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:35e0f2f958eca2c6c65a400311aaedc892c50b308e19b444b81a5c34152cee1e_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:71e60f43eab5c3fca8122a52147454cdeea5ba09e4c5b93266e5c3732f377126_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:3284a445ea1ee777dd791ce9ade976d0979bebc7d2ef1b8ee12d7e2a8975beb6_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:34b8995031ebf6931fc37bdb64e4ce4216d1d2a3acb810c8541c6d9b65eb0b12_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:f61bed36d93956fd0b3df02c59a6c1d33dab7ec1334bd87d5b269d2abca3b326_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:ff38f506b00322fcd78007ce2513f0c3600d4d4169764c871f43969e034d3c69_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:21861eedf299ea5f07d11d99f9b99802c10ea6a3931af7eba877ba1785d8974f_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:627aba20bdc63c6bd13283f8344287b0a92368278420979ad751afb20863c073_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:ac0d3928b83b4cfcbd49f1ea3f2347be12bf36ac7a7da23bde1104a53191ef8e_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:b2d4561100b8cd912b6b2a2b3a3ca377292dccddfa7b062c23af0eef8299b99b_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:5c2bdd7799a419af2f06c6ade1ee9ea60294c7cad77d9163de893217b64dc1a5_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:7a4366860941e811490e2e6a649dd313ead6ca69d0b08861f939f757d6504fae_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:86c2b052511d23f1dcff7c4c1b5d72248f5636faa3baf621f6b39eae658c6bd0_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:fe28b07cef0691d423ad05f9142300203c685bc641530f786173a81593824926_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:21654d3ae2805214b7972948bd18eb13fcdedbe7d0e7700c31e4e70df8e8fb18_amd64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:52c9edc1fbcf08202c53ef031afa5cfaf84a921d9400f2b0cd6a52ff95be4258_s390x as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:a6cc4bec652f78b4e4af1a3f3a4d598037ff160525d44f8c365b296d5dcca163_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:b530551aa7b4c0ea3d52ea7dbb396ab333ca955e26366d72d0c7f807cecf697d_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:1439553e1abf56115e66b3a1184ccde547bf7b7a94e908db77efabbd310bdb5d_ppc64le as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:2bee7d13eca0139913259bf33107eb595fd8c8e6e2cb4f1b279c9679c62689bf_arm64 as a component of RHOL 5.6 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:e1d5ccd9faf1b9c39d686973387d690b91d3ca8177011b7886192ec273311057_amd64 as a component of RHOL 5.6 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html For Red Hat OpenShift Logging 5.6, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 References (5)