A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-04-11T19:38:32

Updated: 2024-08-02T23:32:46.206Z

Reserved: 2022-02-09T00:00:00

Link: CVE-2022-0552

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-04-11T20:15:16.493

Modified: 2024-11-21T06:38:53.967

Link: CVE-2022-0552

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-02-28T10:00:00Z

Links: CVE-2022-0552 - Bugzilla