Moderate: Red Hat OpenShift (Logging Subsystem) security update

Topic

Logging Subsystem 5.5.7 - Red Hat OpenShift

Description

Logging Subsystem 5.5.7 - Red Hat OpenShift

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Logging Subsystem for Red Hat OpenShift 5 x86_64
• Logging Subsystem for Red Hat OpenShift for IBM Power, little endian 5 ppc64le
• Logging Subsystem for Red Hat OpenShift for IBM Z and LinuxONE 5 s390x
• Logging Subsystem for Red Hat OpenShift for ARM 64 5 aarch64

Fixes

• LOG-3533 - tls.cert, tls.key and passphrase are not passed to the fluentd configuration when forwarding logs using syslog over TLS
• LOG-3534 - [release-5.5] [Administrator Console] Seeing "parse error" while using Severity filter for cluster view user

CVEs

• CVE-2022-23521
• CVE-2022-40303
• CVE-2022-40304
• CVE-2022-41903
• CVE-2022-47629

References

• https://access.redhat.com/security/updates/classification/#moderate
• null