RHSA-2025:1985: Moderate: Logging for Red Hat OpenShift - 5.9.12
Published Mar 5, 2025
·Updated
Logging for Red Hat OpenShift - 5.9.12logging-fluentd-container: Possible Log Injection in Rack::CommonLogger openshift-logging-5.9
Other sources
Moderate: Logging for Red Hat OpenShift - 5.9.12
— Red Hat
Affected Software
4 affected components
Red Hat Logging Subsystem for Red Hat OpenShift for IBM Z and LinuxONE
Red Hat Logging Subsystem for Red Hat OpenShift for IBM Power, little endian
Red Hat Logging Subsystem for Red Hat OpenShift for ARM 64
Red Hat Logging Subsystem for Red Hat OpenShift
Remediation
Event History
Mar 5, 2025
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·01:13 PM
Frequently Asked Questions
1
What is the severity of RHSA-2025:1985?
The severity of RHSA-2025:1985 is classified as moderate.
2
How do I fix RHSA-2025:1985?
To fix RHSA-2025:1985, you should update your Red Hat OpenShift logging subsystem to the latest version.
3
What product versions are affected by RHSA-2025:1985?
RHSA-2025:1985 affects the Logging Subsystem for various architectures including IBM Z, LinuxONE, IBM Power, and ARM 64.
4
What type of vulnerability is described in RHSA-2025:1985?
RHSA-2025:1985 describes a possible log injection vulnerability in Rack::CommonLogger.
5
What should I do if I cannot update for RHSA-2025:1985 immediately?
If you cannot update immediately for RHSA-2025:1985, you should implement mitigations to limit exposure and monitor logs closely.