This security advisory concerns vulnerabilities in Red Hat OpenShift Logging version 6.0.12, a cluster-wide logging solution for OpenShift environments. The advisory references two CVEs (CVE-2025-22868 and CVE-2025-30204) and is issued by Red Hat Product Security under RHSA-2025:23535. The vulnerabilities relate to the logging subsystem that manages application, infrastructure, and audit logs. The advisory does not provide detailed technical descriptions of the vulnerabilities or explicit patches but directs users to official upgrade instructions for OpenShift Container Platform 4.16 and Red Hat OpenShift Logging 6.0. The advisory indicates a high severity classification but does not include a CVSS score. No known exploits have been reported. Multiple container images and architectures are affected.

The vulnerabilities affect the logging subsystem of Red Hat OpenShift Logging 6.0.12, potentially impacting the collection and management of application, infrastructure, and audit logs across the cluster. The advisory classifies the issue as high severity, indicating a significant security concern. However, no known exploits are currently reported in the wild. The exact impact details are not specified in the advisory, and no CVSS score is provided.

The vendor advisory does not explicitly state that a fix or patch is currently available. Users are advised to follow the official upgrade instructions linked in the advisory for OpenShift Container Platform 4.16 and Red Hat OpenShift Logging 6.0 to apply this update. Patch status is not yet confirmed; therefore, users should monitor Red Hat's official security advisories and documentation for the latest remediation guidance. No contradictory vendor statements about no action required or mitigation are present.