Red Hat Security Advisory

RHSA-2022:0227

Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.3)

Released 2022-01-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Logging 5.3 openshift-logging/elasticsearch6-rhel8, openshift-logging/kibana6-rhel8

Fixes 2 records

TI-2021-20283 CVE-2021-44832 · GHSA-8489-44mv-ggj8

Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

HIGH 76

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data so…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.97906 Published 2021-12-28 Partial fix · 2.17.1, 2.3.2 +5 CWE-20

TI-2021-08826 CVE-2021-27292 · GHSA-78cj-fxph-m83p

ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to…

LOW 39

ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03366 Published 2021-03-17 Partial fix · 0.7.24 CWE-400