Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Security Measurement
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Insights
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2024:2093 - Security Advisory
Issued:
2024-05-01
Updated:
2024-05-01

RHSA-2024:2093 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Moderate: security update Logging for Red Hat OpenShift - 5.7.13

Type/Severity

Security Advisory: Moderate

Topic

Moderate Logging for Red Hat OpenShift - 5.7.13

Description

Logging for Red Hat OpenShift - 5.7.13

Solution

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:

https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html

For Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:

https://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html

Affected Products

  • Logging Subsystem for Red Hat OpenShift for ARM 64 5 for RHEL 8 aarch64
  • Logging Subsystem for Red Hat OpenShift 5 for RHEL 8 x86_64
  • Logging Subsystem for Red Hat OpenShift for IBM Power, little endian 5 for RHEL 8 ppc64le
  • Logging Subsystem for Red Hat OpenShift for IBM Z and LinuxONE 5 for RHEL 8 s390x

Fixes

  • LOG-5243 - [release-5.7] Elasticsearch Operator ServiceMonitor relies on a BearerTokenFile, in violation with UWM Prometheus specification
  • LOG-5399 - [release-5.7] Falling back to use AWS S3 without any warning when the endpoint is not with https in front
  • LOG-5278 - Upgrade to Loki v2.9.6
  • LOG-5393 - [release-5.7] Improve validation of provided S3 storage configuration
  • LOG-5403 - [release-5.7] Configure Loki to use virtual-host-style URLs for S3 by default

CVEs

  • CVE-2021-33631
  • CVE-2021-43618
  • CVE-2022-38096
  • CVE-2022-48624
  • CVE-2023-6546
  • CVE-2023-6931
  • CVE-2023-28322
  • CVE-2023-38546
  • CVE-2023-46218
  • CVE-2023-51042
  • CVE-2024-0565
  • CVE-2024-1086

References

  • https://access.redhat.com/security/updates/classification/#moderate

aarch64

openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd
openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327
openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d
openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910
openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9
openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6
openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc
openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201
openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae
openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b
openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43
openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f
openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49
openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5
openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4

ppc64le

openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99
openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439
openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2
openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654
openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe
openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4
openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e
openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344
openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc
openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d
openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751
openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7
openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c
openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5
openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d

s390x

openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99
openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e
openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a
openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c
openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece
openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d
openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6
openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540
openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118
openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd
openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c
openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f
openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150
openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a
openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9

x86_64

openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd
openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01
openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457
openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26
openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5
openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60
openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5
openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046
openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a
openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877
openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9
openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce
openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3
openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa
openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b
openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3
openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8
openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility