RHSA-2026:16354 - Security Advisory

Topic

Logging for Red Hat OpenShift - 6.5.1

Description

Red Hat OpenShift Logging 6.5.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Solution

For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes

For Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:

https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5

Fixes

• BZ - 2448271
• LOG-7506 - Vector cannot authenticate to Kafka 4.0.0 with SASL mechanism SCRAM-SHA-512
• LOG-8581 - Duplicate case-variant 'Accept' and 'accept' headers in CLF lead to "media_type_header_exception" in Elasticsearch output
• LOG-8697 - Eventrouter timestamp logic for updates causes Loki ingestion rejection
• LOG-8769 - compression: none is ignored and defaults to GZIP while Log Forwarding to s3 as output
• LOG-8893 - Unsupported cipher suite error messages on LFME pods
• LOG-8982 - ClusterLogForwarderDeprecations alert should be removed
• LOG-9314 - Collector memory and cpu usage always growing

CVEs

• CVE-2026-32829

References

• https://access.redhat.com/security/updates/classification/