RHSA-2022:1461HighCVSS 8.3

Red Hat Security Advisory: Logging Subsystem 5.4 - Red Hat OpenShift Security and Bug update

Published
April 20, 2022
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2022-0759 →CVE-2022-21698 →

📋 Description

CVE-2022-0759 — kubeclient: kubeconfig parsing error can lead to MITM attacks CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🎯 Affected products64

  • RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-operator-bundle@sha256:b74b82c77961dd61c14136bc442a8959aaf0ee3cfaf81a09ce984efbe789f502_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:1d6dd1f6c65affa8060a1fab9366c5543b14826cc1a75550f666119f8034abe0_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:3914e8f0c1271fb38a77caaef4c4a01275466f3d479cf3c89593695ba4b287ae_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:952ecc1ac2b769037b18f2053d903b349466c991f14fea47b06acb2bbb1deba1_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/cluster-logging-rhel8-operator@sha256:b46b95fc2e9ab0c7405edcc60d546c2669b9edd0e631d5450f844ac9e79834e4_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-operator-bundle@sha256:1b54c744d8de4210758a5393eef78c742cb243fc6b6615efc0f9be577fd9554d_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:4f6070201fec54a792c6687289273644b14f087e984197f2098b66b44478ad70_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:761cf60adcd237b39c11fe14120fa6858f0b951c57be31a36f9ce3e49299c139_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:c6f1bcf0681bb67212d370857bdf2cfa2ac39e5d6fa534e8c20f10fe41d1aaec_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:d5c24afd8a962f0f061b784e936a7c9701b5ea8846b254466073673add0e96a2_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:1e4b9a092a9c165dbfb1f79a076db3889f6564579e99563f41d06ee2b415490b_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:979d0020abe522e590cf402dab8a9eccfdc4eae58b6282ace2794aa5be2ba349_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:a54e80949a20830dfa3028a083b774d5bcaf07da166868681c8e7a8fe1355d98_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch-rhel8-operator@sha256:adeed182d6023f4108ee86094c2153673d743ca958b7be78ee4919ae29f848f8_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:245a1b50c5ab1c6b64b5c9a5d3bac7220341164eefb35c9a9556b3d881984daf_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:2973c57c1dada06cf686862d45caf9ff6668ce36d52a4278f9c57a8647164a71_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:651d6321119d385d9a5204f99af52dd377444928860f2758bc61e327847528ed_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/elasticsearch6-rhel8@sha256:7983352391dd09c930c6a115992ad8b462bcdad4d160da1caadd2f0b356949f8_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:0de6d8a34ec21eaadfdb942195c8f3993a3f78238a9b113bf814cbae4d17b58a_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:32cb63ace898ef0a3e063cc1bee6f381f61a70a62a9dc866c327ccc7becaf230_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:9108094ae3358ee156ef7ebc704e958e5fb47ec56077a4a196aee6b8dadf2363_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/eventrouter-rhel8@sha256:d1292718c6813ed98197432f95de6ea521bf480e9b8ce277e56a7494fee0e03a_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:242693be31ceceb8b48255bd73a3b61c955c804e3d22fdcf89f1f9ea2a4a8c46_amd64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:93f458bc75d3a69fff93a57762d71373179bd07ac0d7b491eebecb5664349cb7_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:ab54ae9e09c7e2b0d9807f6b00414e10384d4bdef76a38852e3ee864ee5e2cc6_s390x as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/fluentd-rhel8@sha256:f43c78d178cdc9887c73832fd65553424967e0cf6510d0c59c42c879222754b1_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:186cd4a4e92389f6946fce09964fa6189359a02932785cbbd9d7a650bbf726c1_ppc64le as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:209c588fd2ebbdb9ee63b5c55c7822b8fd4c6f5c5a823e1616bdc659b47adb48_arm64 as a component of RHOL 5.4 for RHEL 8
  • openshift-logging/kibana6-rhel8@sha256:4fec46a8af0b9c8b8610353899b6f4f8c681ed3b5a87610fbc0b7b250456572f_s390x as a component of RHOL 5.4 for RHEL 8
  • +34 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html For Red Hat OpenShift Logging 5.4, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.10/logging/cluster-logging-upgrading.html

🔗 References (72)