RHSA-2022:2218MediumCVSS 8.3

Red Hat Security Advisory: Openshift Logging Security and Bug update Release (5.2.10)

Published
May 11, 2022
Last Modified
October 22, 2026

🔗 CVE IDs covered (5)

CVE-2022-0759 →CVE-2022-21698 →CVE-2021-37136 →CVE-2021-37137 →CVE-2021-43797 →

📋 Description

CVE-2021-37136 — netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37137 — netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way CVE-2021-43797 — netty: control chars in header names may lead to HTTP request smuggling CVE-2022-0759 — kubeclient: kubeconfig parsing error can lead to MITM attacks CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🎯 Affected products30

  • OpenShift Logging 5.2
  • openshift-logging/cluster-logging-operator-bundle@sha256:e4ffb0fd45e60c7bfb77ca368f41064fd73e442390a502f8f393ae81839c00a3_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:65f4692fd0c2ec0edb10078bcf0c1760ddc13820ab1ca5324fdf610fb5a8fefb_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:789a92c72f43e7144f7a606ded1d46dd37905d455f742dc6432e1a6f7cd1166b_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/cluster-logging-rhel8-operator@sha256:9ce12df98f4d7025ebd57d3df5663a8b8f954850458553ba46e3632c2d541f5a_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-operator-bundle@sha256:9321f376ff20443db006135e17060f6d5e0e95643d16cb9b8a839b9f95746fe0_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:8cba0a6f2a32e8d37abb7e00f461a8ed3415c53ab3aca350b138687f636acf5a_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:9b03dd6f7c46aabcdf380d1f68369a3543857984f9cf396c9c69479d7360aebf_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-proxy-rhel8@sha256:b2d34adb0fa6923aaa9f27e293f1b99a201d45bcd0b75ef67fc66125f861eccb_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:60ec64113b27eb5dfb0b8857174efc3a98da8892493a9fa2988dfc24d0539863_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:7b2af74b2e17b9d7a94dca9d80c8f7a0888f176b3044719f82d324c51124e812_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch-rhel8-operator@sha256:f6cf62bdf8f65b2c9e384d560a3e10faf1bf09ef7646316e600c03292bcc6e9c_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:267643d1c7686a12e548846a2b15ed1dd9af67353fad47487390b67da61cb833_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:a9d77def08bd0f8dd6efdf3b4f4043adc34ecdc8ad711c07d5e10ab9859c3bf4_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/elasticsearch6-rhel8@sha256:c6d38cf0a1cedd00eb56d0d34133224dbbf40cae1ac227a68666a8fc527d2c4f_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/eventrouter-rhel8@sha256:817f5dc6aba5ab38267c519e3736125170e05c8f92a89ad49c59b85a17361924_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/eventrouter-rhel8@sha256:90c95cdb1833dc963c4f20ee1ef490eab39a194a5fd3388dd334627d0da35bb1_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/eventrouter-rhel8@sha256:ed1814ad94f78aed0f675c94e2977caa37dd37dab2cc97cfca822cca8e8d308a_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:0f0ecc6f72d023e6450d9039ec9854a1dd2e6a6b352fca447f3c41eedf51f632_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:550a893bd01fde28d01e719d6dab9e7d0bba3d258be6f4f3f1fd943cd64bac63_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/fluentd-rhel8@sha256:5846c4532557edd75fb21e46a2e7df9ef2d49750fb3e6c207da8437214f84801_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:8156bd1e3fcd549a0702410658bf523d7223e4ecee9da46b17d467badcb77950_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:b0d18b2097c25d8d790a327f383d402b38e52de16f66003a51a31a2d208229bf_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/kibana6-rhel8@sha256:e712c9de32b6e58a7abd2baebac2cc4e6c6d448b87e5e4d6241410166c6b37fe_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:4ba11d9e70d9f79220eb117675f8f86786f8e240c635f82e956396a6fd2dce33_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:93e626d851e4251ac8adf5c11328f9e774f36880e9f853a75d6eca43b5f09e76_amd64 as a component of OpenShift Logging 5.2
  • openshift-logging/log-file-metric-exporter-rhel8@sha256:c161485004aee7ff930d73712a710aa0be1e8f17379b1e1a6468b008382d0fcb_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:24b768c1d2fb38041cf14bfc4d7e95a98667b54cd06559eb17e56b38cdef5935_s390x as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:946862097347e7872b09a6b28e32c1faad3afaa721a2d11ff2efc1523513eb3d_ppc64le as a component of OpenShift Logging 5.2
  • openshift-logging/logging-curator5-rhel8@sha256:d4f09349b8ad4c53463bab012ce783ab53111f4fc2bca790d61e7ded91e0e37e_amd64 as a component of OpenShift Logging 5.2

✅ Remediation

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html For Red Hat OpenShift Logging 5.2, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html

🔗 References (12)