RHSA-2023:0930: Moderate: Logging Subsystem 5.5.8 - Red Hat OpenShift
Logging Subsystem 5.5.8 - Red Hat OpenShiftSecurity Fix(es): express: "qs" prototype poisoning causes the hang of the node process (CVE-2022-24999) golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat OpenShift Loggingto a version that resolves this vulnerability.Fixed in 5.5.8
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0930?
The severity of RHSA-2023:0930 includes a significant security concern due to multiple vulnerabilities in the Logging Subsystem.
How do I fix RHSA-2023:0930?
To fix RHSA-2023:0930, apply the latest security updates provided by Red Hat for the affected software.
What vulnerabilities are addressed in RHSA-2023:0930?
RHSA-2023:0930 addresses vulnerabilities such as express 'qs' prototype poisoning and excessive memory growth in Go server.
When was RHSA-2023:0930 released?
RHSA-2023:0930 was released in 2023 to address specific vulnerabilities in the Logging Subsystem.
Who should be concerned about RHSA-2023:0930?
Organizations using Red Hat OpenShift and the associated Logging Subsystem should be concerned about RHSA-2023:0930.