Where
-Infinity
0

OpenShift Logging Bug Fix Release (5.3.2)Security Fix(es): rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327) log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Remedy

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:<br><a href="https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html</a> For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update:<br><a href="https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html" target="_blank">https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html</a>
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203