RHSA-2026:11800HighCVSS 7.5

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.10

Published
April 29, 2026
Last Modified
August 18, 2026

🔗 CVE IDs covered (3)

CVE-2026-25679 →CVE-2026-27137 →CVE-2026-32829 →

📋 Description

CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-27137 — crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-32829 — lz4_flex: lz4_flex's decompression can leak information from uninitialized memory or reused output buffer

🎯 Affected products35

  • Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:17353255c31e79c2ec45de5367019e0fb30570a1cc3cff6be170199eeb18e4dc_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7fd22572f12bbc2029f24eb623eb814747500b436c1c9d303fe7c6e875006000_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8f625e3b3961e05ded9032076f88bfa4bdbb6dc5d64bb4a9a03284cc64ade3da_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9a0ebc5fb636a3eb613eba828db0a52f95582533a15c121b01346fb55d335b49_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:cf63b1d43e799bf2fccf11c2f5ff1e8dabd407a4ed3174ebceb91a7b15ea33d8_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:328340d4d482b06ab444f435aeb9c2a43ac7177ecd1ab8eec297c56aa6467203_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:450a1302db3b38b2f63645dccd1d992a4b61e42fb375f49cd62d2af292fb54ac_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca54850f60fc615b3ff7f04399173853722a42845e9a7ebae5c50e9659eab90e_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fe6e806f9e3dcfdf75897f769bd0ddca5d6f2333bf8d7109a8883c55f1473273_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:54e5b1a076008e32574ddff8fc3a3ea9aa8cfb3c2ba2d2736c39906f15b1350d_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:760d23df05d5ed4a370401c5bc0485ba9479312ef6628445995bfa4710b0b18b_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:932962c0efa367e1b09b66deda20d58093321e376efb4fc8a99cae97854cf71b_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b45be7ff7e4e9dd659de7573c01d22db97341e7b12a2306e35b0ed0db5c1b966_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:303dbc8494a46ed4eb24a4e6ee503a5f3e791bbcd45af2576e111855514c17a9_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:aff23731ba90a17219df3a56a571904ac9267c43f6def4d049236d152b704254_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bec80cde1b5262108ffa3c684a81d090de850114a68d049c651a6d05542b7468_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fc0dee9a5f93e89a7225149766f1976cb67be1459456c9367dba48c3df3dad36_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:da1df9b6504750ba6c7b2187c3f4cfe9e8da8bdd32daa3fd1f7b84cc285c6394_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:454bdee681a24666732fc98764d799f54446031730e408648397713f58d73c7a_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:80679c65e340cced2aca6458ecfbe04f85171e0c066a39e93d44e38e444daeb1_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:83f22ad20ad1e6c123a4f26de43095274fa4fd55d396b3bb5f74f8e2b73b01ee_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:892c5dcdf43882b275d59c7997cddff4a319394327ea7b5d16a074c70d7fe059_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:35b016e136391b2377744cfaffdf5ea5a0bfb5cd83a24003d1f4468859520693_amd64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:5eea261a9be54be482073d8f58ac09e599d7bb0a01255e0966a1a34b9b306788_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a7c2417f3fd6e2e421a9551b061d90badbe0b7971282ab002d71cccd8c3bc739_s390x as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e0ae5996726af5675dc84217f220fd12c5c7a3af069ae0a5e0c985aa1efc40b9_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0301de23e37b680cfb4f7c7b737303f1564b5a947282590ad32c521834b0453f_arm64 as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:04b6062eedba3c57e099187cb627186f34f48a09df81576bbea7ac2a3e57936e_ppc64le as a component of Logging for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:7d3c287d9ac66d905624f5aefc5fe9eeadbff7868c1c31832aff74a8a0673216_s390x as a component of Logging for Red Hat OpenShift 6.2
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes For Red Hat OpenShift Logging 6.2.10, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)