Red Hat Security Advisory

RHSA-2022:0721

OpenShift Logging bug fix and security update (5.3.5)

Released 2022-03-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Logging 5.3 openshift-logging/elasticsearch6-rhel8

Fixes 2 records

TI-2020-17296 CVE-2020-28491 · GHSA-xmc8-26q4-qjhx

Denial of service (DoS) in com.fasterxml.jackson.dataformat:jackson-dataformat-cbor

LOW 37

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02417 Published 2021-02-18 Partial fix · 2.11.4, 2.12.1 CWE-770

TI-2022-00471 CVE-2022-0552 · GHSA-4r7g-fj95-jwpc

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the…

LOW 29

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01176 Published 2022-04-11 Fixed CWE-444