Red Hat Security Advisory

RHSA-2025:1985

Logging for Red Hat OpenShift - 5.9.12

Released 2025-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9

Fixes 2 records

TI-2024-11859 CVE-2024-12797 · GHSA-79v4-65xg-pq4g

RFC7250 handshakes with unauthenticated servers don't abort as expected

LOW 38

Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verificat…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01857 Published 2025-02-11 Partial fix · 3.4.1, 3.3.3 +2 CWE-392

TI-2025-18853 CVE-2025-25184 · GHSA-7g2v-jj9q-g3rg

Possible Log Injection in Rack::CommonLogger

LOW 28

Rack provides an interface for developing web applications in Ruby.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.01185 Published 2025-02-12 Partial fix · 2.2.11, 3.0.12 +1 CWE-117