RHSA-2024:2932HighCVSS 7.5

Red Hat Security Advisory: logging for Red Hat OpenShift security update

Published
May 23, 2024
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products60

  • RHOL 5.8 for RHEL 9
  • openshift-logging/cluster-logging-operator-bundle@sha256:c47be5a5806c99e8aff2ef30c723cb922a702645b898a58ab83a6d8d6e35e95e_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:2303e515d38576bb4afb5dbed0edc076c64bea8edeb8c1cf6ff022798777babb_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:4dda7d95ec0daf96b89d3c7b65d46bc1a338beb6567b5456934bfbb056f351ab_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:b83a2debfe95072729cc9db1917436d24b38c645ed58bba29c77f43363a3fbfb_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/cluster-logging-rhel9-operator@sha256:e1da801f88284017b42bf0ab7bfa8d3246708a1d669c03e4f8e10b7e7b57328a_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-operator-bundle@sha256:31b9f0c3c8b1fef81a18bab856d011a0eced7ca1fcd74d62ea77fab592006693_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-proxy-rhel9@sha256:02f01a7b607b0e5bec904e2b3dee2d5a870d68ce68598af81b8ff254b23bf570_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-proxy-rhel9@sha256:439fec7733007049760eec9ab0befb17847d982cffe4f8175c96cab5cd3a033b_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-proxy-rhel9@sha256:526cb245f74190516468b380b1dfe302c7a270c6f5e40708a696d54df640e041_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-proxy-rhel9@sha256:7393fa8a34232062577f9b78b53630dec2d79a383805e9305ca36d2d34ea5de0_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-rhel9-operator@sha256:705a960175390352ecbebdf1d329ea6a2d980f9c93a63d433ae93d0b04081db6_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-rhel9-operator@sha256:de941d69b5e297abf6b832e2663ce657bad520073ad4f6302d17a8d6ebcb0588_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-rhel9-operator@sha256:f0ce5f22f7aa49797de754efa2b17c62c41558b00c558328691a21ff2c23c8cb_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch-rhel9-operator@sha256:f67f38331f9bd962564523c4c47834e3adf988bb2ba6557228a94faadc12bb12_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch6-rhel9@sha256:1bd4cac1d2078737bbfc2e4ed1b520d47ab66c68d0d7dd92abc414b0d36ed020_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch6-rhel9@sha256:2b88ad83be942f63d284d3e03b3c32142fedf46f5e7c3d3bbbb6f2451ae2daf5_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch6-rhel9@sha256:851b0302ecdbe432c100fb18b443b6db70fe2c1558f0ce2a62f824a9035ae646_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/elasticsearch6-rhel9@sha256:c017dcb8062bcaeae7905c3a2bef4bf51b0822c91656093d0ae3a75c559716ea_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:01af9f73e47407759bfa083e0b75655ac02dcb5abbf42f1be40d21c9321a28cd_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:5c73ad6d58456f89b6393235b53d0674816e4eb628a5096b9d0072b60822c41b_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:dbaadc1ba30b714a4e7720f427d0cd9f42864fa2f3ab45f3d8e8eb78b5562a2d_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/eventrouter-rhel9@sha256:dd2aeab25497d540046526ab7f8c6f7ee4e8e287047188221ac63c46563f8673_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:2a438b59400d0c8d2fd2801b090147a23c397782e2bb45b7f50a0bc621470dc1_amd64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:38081ff6228fe62ba00bfecf4d7b402d95d0c708eea8077bec37c792bb5dbfc7_s390x as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:42d1eed6409836f5e73a119a46a179dec9e96d821d5d742dff35f08eb986807c_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/fluentd-rhel9@sha256:c4529e2d14e53da00c703efb9f4d255121aa3c3cbe1a007fc81bead882667dd9_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:059d8783be55371bd75e772750e8697910cf8be40792e838843c81dfaadce19e_arm64 as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:5fc34d4024f969fe3ec47a31336b90e8114e73fefa80d898b4ee826f1f4c7b65_ppc64le as a component of RHOL 5.8 for RHEL 9
  • openshift-logging/log-file-metric-exporter-rhel9@sha256:d1dc69ba8b1a61c91bcc5cb3a8332c9e1065918c2b7f46ec6684e72b15d8a770_amd64 as a component of RHOL 5.8 for RHEL 9
  • +30 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html For Red Hat OpenShift Logging 5.8, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.13/logging/cluster-logging-upgrading.html Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 References (8)