RHSA-2021:4032: Low: Openshift Logging 5.2.3 bug fix and security update

Published Nov 17, 2021

Updated

Openshift Logging Bug Fix Release (5.2.3)<br>Security Fix(es):<br><li> nodejs-handlebars: Remote code execution when compiling untrusted compile templates with strict:true option (CVE-2021-23369) </li> <li> nodejs-handlebars: Remote code execution when compiling untrusted compile templates with compat:true option (CVE-2021-23383) </li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat OpenShift Logging

Remediation

Event History

Feb 3, 2025

Advisory Published

via Red Hat·03:16 AM

Data Sourced

via Red Hat·03:16 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2021:4032?

RHSA-2021:4032 addresses critical vulnerabilities that can lead to remote code execution.

How do I fix RHSA-2021:4032?

To fix RHSA-2021:4032, you should update the nodejs-handlebars package to a patched version.

What vulnerabilities are addressed in RHSA-2021:4032?

RHSA-2021:4032 addresses vulnerabilities in nodejs-handlebars that allow remote code execution when handling untrusted templates.

Which versions of OpenShift are affected by RHSA-2021:4032?

RHSA-2021:4032 affects OpenShift Logging before version 5.2.3.

Is there a workaround for RHSA-2021:4032?

There is no recommended workaround for RHSA-2021:4032 other than applying the available security updates.