Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products43

• RHOL 5.9 for RHEL 9
• openshift-logging/cluster-logging-operator-bundle@sha256:0fd4b24fdc4ae0777f8c520128396a453d38970f47a4c9cf56e7bfcc27c73e19_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/cluster-logging-rhel9-operator@sha256:141e74fe4ad031ac2bdb2ddbe752a9c96a9d295e0c3e8d6a72748aa96014a64f_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/cluster-logging-rhel9-operator@sha256:24e8c777298eaad22b4ba4377bb40281b7a75022ad02e2a4671f0da4ab86fdff_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/cluster-logging-rhel9-operator@sha256:6b4d17867f342c80119174af037319568da13562dfd3c0319cace2ec097b56bf_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/cluster-logging-rhel9-operator@sha256:b7e786cb7930c5a40faf0da45d2c508996103e975463d7062f22e97b04cd3f66_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/eventrouter-rhel9@sha256:6e2301ab3451f05e5e6b8bcf1fa80e6a86bde93704138b987494c1d46ca1c5e3_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/eventrouter-rhel9@sha256:8c3b1e75f6a764814725978dd07e22562a7fe516bdc7ff99f604559487a1b972_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/eventrouter-rhel9@sha256:f86cc7235333b698c32f8cca0ef5b30432faaef6f741c74e2bd4cb7372b57784_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/eventrouter-rhel9@sha256:f94ea569cfb249ae3ba5ed77d8a8de2624709c3262fb61821bcf4466bd1b9679_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/fluentd-rhel9@sha256:2fadd17b19306cc6d89001ff711c5e6cc8be12eafc8dae9b3bade30f790a90bf_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/fluentd-rhel9@sha256:53502bf985083b07d159add436f4ba24b70c9246dff454e766cd320b626ba295_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/fluentd-rhel9@sha256:5591c4896d634481d947eb3a54576e07f0acff792ba863a0c3087f9af5c150e2_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/fluentd-rhel9@sha256:d56a8ce8304ebea3e31471b4cf76e93e859e176de09343b97d4e4dc5948d35fa_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/log-file-metric-exporter-rhel9@sha256:90fb7da86b96e612eb2e5792f91c651383f0b924802e5adb38bc8c3438fc9947_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/log-file-metric-exporter-rhel9@sha256:98d6bed0aea9e2673b7dd446a77774f6a463dfa0eac7536dfdeee841bfd23c13_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/log-file-metric-exporter-rhel9@sha256:d2eb63a201ea1f72281e3fac2b8570283a76f11f85a60531cd038df85411b43f_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/log-file-metric-exporter-rhel9@sha256:f4e999a27aafe23d0cf947586ee97ccb1213587f9df463684a1a26e42fd2bae1_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-loki-rhel9@sha256:2ef2825c9c25faf8ce52280ebeb7b7b2539fe8598e472b86c1f80c7839e69bce_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-loki-rhel9@sha256:4351b3f86d054b81035342c768efbc2d6add9f287879a52eb26dd167182be52a_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-loki-rhel9@sha256:ea8e27415923a9e2437d1627451cacd42e60c3f103c0526cb9e80304dada6307_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-loki-rhel9@sha256:f9b34a964c6ef07f284f02b3015373058bae6487b490d9c06bb22adc97ce596c_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-view-plugin-rhel9@sha256:522daafc39886ccccfb5021677da932d915f6befc82a0e61bb3895224bf19f26_arm64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-view-plugin-rhel9@sha256:6d152c585a474fdf0e2557765ce3f8f2c3f595a922f962d573d1d8af8244f78b_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-view-plugin-rhel9@sha256:bc7f66033624f69545b759f73924a59a432771b1c52c6ee601ae9e7a9787d81b_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/logging-view-plugin-rhel9@sha256:d182b56563a159698aa673989280fbaed3d680d8a4203cf6e1d679a6aef1e76c_s390x as a component of RHOL 5.9 for RHEL 9
• openshift-logging/loki-operator-bundle@sha256:3fa2044534b778f7616417e9c31c35446ffc79c6a68f6fd4ffcaeb8f64e3ea34_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/loki-rhel9-operator@sha256:00f258e7f36de191e78dcdb84c3234e86e4313f6c42e1a79843e07a2d5df6efa_ppc64le as a component of RHOL 5.9 for RHEL 9
• openshift-logging/loki-rhel9-operator@sha256:697f7a1604a5e0ce0779702ad6d946b7eca54803422de442a9cf1667479f6603_amd64 as a component of RHOL 5.9 for RHEL 9
• openshift-logging/loki-rhel9-operator@sha256:84cad12a9223d84f339fdb2ffe944620d2fff39f4be2fe34fed6ee7fe4a8393f_s390x as a component of RHOL 5.9 for RHEL 9
• +13 more not shown

✅ Remediation

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html For Red Hat OpenShift Logging 5.9, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (3)

• selfhttps://access.redhat.com/errata/RHSA-2025:1985
• externalhttps://access.redhat.com/security/updates/classification/#moderate
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1985.json