RHSA-2026:92515HighCVSS 7.5

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2

Published
October 29, 2026
Last Modified
November 2, 2026

🔗 CVE IDs covered (6)

CVE-2026-41178 →CVE-2026-42499 →CVE-2026-63209 →CVE-2026-77619 →CVE-2026-84304 →CVE-2026-84445 →

📋 Description

CVE-2026-41178 — github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers CVE-2026-42499 — net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-63209 — github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing CVE-2026-77619 — vector: Vector: Denial of Service via unbounded memory allocation in Logstash source CVE-2026-84304 — google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

🎯 Affected products35

  • Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes For Red Hat OpenShift Logging 6.6, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)