Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Red Hat OpenShift 5.4.3 RHSA-2022:5556-01 Moderate Logging Threat

red hat
Calendar Grey July 27, 2022
Dist Redhat Esm H88
The Logging Subsystem 5.4.3 of Red Hat OpenShift undergoes a significant revision to tackle various important challenges.
Logging Subsystem 5.4.3 - Red Hat OpenShift Red Hat Product Security has rated this update as having a security impact of Moderate

Solution

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly, for detailed release notes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.10/html/logging/release-notes

For Red Hat OpenShift Logging 5.4, see the following instructions to apply this update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.10/html/logging/cluster-logging-upgrading

Summary

Logging Subsystem 5.4.3 - Red Hat OpenShift
Security Fix(es):
* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory moderate severity security impact threat fix Red Hat OpenShift logging subsystem

References

https://access.redhat.com/security/cve/CVE-2020-28915 https://access.redhat.com/security/cve/CVE-2021-38561 https://access.redhat.com/security/cve/CVE-2021-40528 https://access.redhat.com/security/cve/CVE-2022-1271 https://access.redhat.com/security/cve/CVE-2022-1621 https://access.redhat.com/security/cve/CVE-2022-1629 https://access.redhat.com/security/cve/CVE-2022-22576 https://access.redhat.com/security/cve/CVE-2022-25313 https://access.redhat.com/security/cve/CVE-2022-25314 https://access.redhat.com/security/cve/CVE-2022-26691 https://access.redhat.com/security/cve/CVE-2022-27666 https://access.redhat.com/security/cve/CVE-2022-27774 https://access.redhat.com/security/cve/CVE-2022-27776 https://access.redhat.com/security/cve/CVE-2022-27782 https://access.redhat.com/security/cve/CVE-2022-29824 https://access.redhat.com/security/updates/classification/#moderate

Package List


Advisory ID: RHSA-2022:5556-01
Product: RHOL
Advisory URL: https://access.redhat.com/errata/RHSA-2022:5556
Issue date: 2022-07-18

Topic

Logging Subsystem 5.4.3 - Red Hat OpenShiftRed Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate severity security impact threat fix Red Hat OpenShift logging subsystem

Relevant Releases Architectures

Bugs Fixed

2100495 - CVE-2021-38561 golang: out-of-bounds read in golang.org/x/text/language leads to DoS

5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects):

LOG-2536 - Setting up ODF S3 for loki

LOG-2640 - [release-5.4] FluentdQueueLengthIncreasing rule failing to be evaluated.

LOG-2757 - [release-5.4] index rollover cronjob fails on openshift-logging operator

LOG-2762 - [release-5.4]Events and CLO csv are not collected after running `oc adm must-gather --image=$downstream-clo-image `

LOG-2780 - Loki cannot send logs after upgrade to 5.4.3 from 5.4.2 with 'http'

LOG-2781 - OpenShift Logging Dashboard for Elastic Shards shows "active_primary" instead of "active" shards.

LOG-2786 - [release-5.4] Token not added to Vector config when forwarding logs to Lokistack with Token+CA bundle.

LOG-2791 - [release-5.4] ElasticSearch operator does not respect referencePolicy when selecting oauth-proxy image

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here