Red Hat Security Advisory

RHSA-2022:0043

Red Hat OpenShift Enterprise Logging security and bug fix update (5.2.5)

Released 2022-01-10 · Red Hat rating Low · View on Red Hat →

Fixed in

OpenShift Logging 5.2 openshift-logging/elasticsearch6-rhel8

Fixes 1 record

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20