RHSA-2026:16354HighCVSS 7.5
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.1
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32829 — lz4_flex: lz4_flex's decompression can leak information from uninitialized memory or reused output buffer
🎯 Affected products35
- Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:75809ac4388ea00a5e69354a37722da8bf72399fccab112225a0a3dc3f611dd8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:97465e7c1b988ecea1408157a89ad4e7862cbddaaec08e20d5849675b4317958_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:aea665db0ee5d3ce00e48c01b55c803207f89bdc94b0104c3bc49121f6b13451_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f3d70e12125ab969c761c638095631c305b26cb6904458f26340eae63a4c2292_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f8f50fb28758913f6888d8441f9dcc92a40a66d2a3abc394809d7fd20923e444_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:099658098b080c9d7083f9d0f3fd802a9d2d750aab5ea7c6cb52fd25bb4b41ab_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:17c25ab56bc5eea75e3acc873acaf8be8032eb17c0472ce326fc7c439a769673_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:89617bc4c54249fcfe32d37a03709c4f4b8c5b7a3405b34edd7bf7840e2006a1_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f0118676f43939d175e8200de112217246a121b172ce52b5b915acfdff6a4965_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:030590ef85e4f9514e98448c92b7b82a9ab6309c1c9f77dbe8656444aee84285_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:08c0693e03902da7d05b3e3c42146b076c1071726ac8972950e3402437400902_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c076d150644891190dec8ecbdd2ce8206dc3dccf3a081c0ead1ee0a1b9481776_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ddec44adffa3ac5cb8d452c331d44c76e2cc0fbd3e3e7d5c6e33f31cef61235e_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3f56eb00f5a073547562f4d6eeacd8f74b04ee86dd792cfed428e039c851e761_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bde9767179608d0635236ffbbce3cd2498e65c2c215696b7d3b889a6e43afa72_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d9d8afdf3a66ae7ef84851e9ee05d67e9800d0feeabd629426ac363edccfbf56_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fa9c83af020c2c00e75d552407ea39407da4296591be26d7b14f9d70a5ee8d03_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:34e7fcd27a0bf925942e197c37d5b7d95fd26ad5a793ab262525ecc3812cb52c_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:0eace12054df056fb914445b074b5fb83724dcbafa2c17a7bedc37f336f30def_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:997aa7733f50fd13b17d27367b790b7b8f012c5fe180e8ddd98c62c2f3bef5fc_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a71c1bacdc0f29656030a3e615987e61165af64d1ba7e660b480ec3597bf0b43_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c1542ca56ad482dc3787b45836a86b38427a01de38ce93a8837e44bcc3ef037a_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:17668e678303c22b8ac610e110856b5d95eb6cbcc25bede80f811399820131c1_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2d3f05599e25a982e3b2a44ae4651339e78040704ee47ddc9203d521a32d962e_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9e7a0e7d1b86cc67870bed70f376cc825480ead96d654295efeb4b73f3f29914_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:be5b42ccebcb07b4d1de898d6bfa19c1f4a326f3aecf4234aa152401d5f33882_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:15110a7ddc71abaf6c540ab0e387c36079e1e8154d4891efa41fc3139ef26149_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9cdf5f81d0da4c350addf6654f15246fb61b5302532ea90ade5c788d80a564c2_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5
- registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d2ffc7d5daa3a28ac1babbca963f07c68771a5c7b8de8056553aca81c95e5db4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5
- +5 more not shown
✅ Remediation
For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes For Red Hat OpenShift Logging 6.5, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5