RHSA-2024:2930HighCVSS 7.5

Red Hat Security Advisory: logging for Red Hat OpenShift security update

Published
May 23, 2024
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products64

  • RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:6349e0dfa8a940002570e6a0d5d7b91cf9f1fc2186da823150be95c55e7eec64_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:5484c76cad28fa452c48f67d95295583dfbc6d34db22495eccfffec051893c49_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:a1aafbebeca86cf4b52600bca4c3014881c1ffca7587d2d382275a3d247d72e9_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:bcf26dae2241ded8335e3236944639643ce63027a24645d2de0d013589e79876_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:ed41b5450aa91a1dbb519acd184f87f96e090be3d099e88dc27a005bdc9bab15_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:a846c915cb692856eb1907726dc06c35564da1e40bbec7e1fe05b3b64327b8d4_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:19a6691d7a3010253bf18a00a1b58896350354494375822744d08a09e0121416_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6433a808ccc5c4c1559c183a81671b7249c3bae1bbc0f55e982ee73dbe9700e3_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:6934dffdc619dad6e81ae2032708d41e487b2709c14794819accdaa60aae582e_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:e18ecc9b852178129fdb2a2efb40f97f6814f6980681ac82eae2eef9a317a96f_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:3be80c8c50ed785eba9d289656cc87477b5a3a1bdd71fd91d048c66687ce4646_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:6f6b013bef1ddc9ec0437c0c7727bb0f8ebf9caae8ba4cf0dd6628d6c7cd768f_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:8f107eed0efa34f6fa00003098457a58c1fd482286f590359a73c39ef225deb7_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:e902f46cbcf188bc6e50b2351cc20465a7a238e1521568261a50f8cd33108752_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:1c6c3634aae0f7a47fba4f1a06530e742a0042896291579642a605b53105c019_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:3b42c3d5afc01b5e025f4694454c34c4577e7902d2004620e1d97940b9fa13ab_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:c0fc4eb8c0283e8cc9b08a1fe1cc49bd498d28d1233affaaf02b338de1cee5e9_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:e2839a1a45aba4a367003abc7bc4e15531d6f278de1779f4c063ab6a002e960a_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:1194cc3737cb2317e3f4b9760d2ac2aac1c804d4f5719a3513535acdddacc929_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:20eb0257f8ca0dce4e5d979a579b2d868c7b5313a661b2ab9dfb3c6f97bd0d69_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:492d612cc28ad4158d2fb071704ada6d667d939000ff4af20ab9ed3dc1c4a53d_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:ec95c7ff9c5a13a3cf11e89aff97d792f63cf89fb654f063aa662d134a335ee8_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:4dbb10ac48ebedcd08e4d93d7958876d7c489b3c0764a703979c4cc16b2faef5_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:95cd644aef3ed635fab4a04e8dd9e63a79812e2671a706dcecfcfb462fa9f287_ppc64le as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:bdb22f54ed17a76cb18e86f0a66ce6a5d1e12996b1c730c188096a78587bc220_amd64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:fa5bba068d4ebf7624ad20c72af47a984e460bdbfafa90c83b7b78a9113354e2_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:c92d7b58be4a5dd715101723b187cf930e7b86ffa6e7a7b3119b7512c0f68639_arm64 as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:eb058d7d6145d35624567de74ed139aff8186062a0496663d45b1d6f9b2ae68c_s390x as a component of RHOL 5.7 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:ec811d44ffc9fb926808773bdb33789411c07d46809c7318bdb9568575204fc7_ppc64le as a component of RHOL 5.7 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html For Red Hat OpenShift Logging 5.7, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 References (5)