RHSA-2021:2983MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.8.4 bug fix and security update

Published
August 10, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (6)

CVE-2021-34558 →CVE-2021-31525 →CVE-2021-33195 →CVE-2021-33196 →CVE-2021-33197 →CVE-2021-33198 →

📋 Description

CVE-2021-31525 — golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header CVE-2021-33195 — golang: net: lookup functions may return invalid host names CVE-2021-33196 — golang: archive/zip: malformed archive may cause panic or memory exhaustion CVE-2021-33197 — golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty CVE-2021-33198 — golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-34558 — golang: crypto/tls: certificate of wrong type is causing TLS client to panic

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.8
  • openshift4/egress-router-cni-rhel8@sha256:52d3830ab271f05e90375c245d1447edcec0d0d75bad12b4aca17ec8fb653b8e_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/egress-router-cni-rhel8@sha256:f2c56afeabee5355e6fa406bb87c34db0c7a135fdcd445827148fb9537495299_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/egress-router-cni-rhel8@sha256:f9329bdf8d23e5bee621e449b63403d8bc012dde1592454a38f6f6423a755729_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/network-tools-rhel8@sha256:7175c0b1cb393a16b98823080abd43f2dd2f27900d3a4536517b49e1108cb177_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/network-tools-rhel8@sha256:71e892d9150cfeb3db2aef129bf63f9dac362e083e325340bf1932aba4218080_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/network-tools-rhel8@sha256:a6271a7ad7dc5170484557e184465f370e78d9b9a0694968f1de4ab6d7fc3afc_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:279a3024378f77e9414f6c47b73e194053d6c45c3ebcc864ec92bbb035a88a61_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:011e0164b5655627a28e2af065a0e0a52aae83f281b4477c115640b5c5a985a7_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-aws-machine-controllers@sha256:5c4dee6907f6257779ab7186155a945e64c51afd89cfc3252ca78cb17722b737_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:4a483b8f91bddd054ff79f8a62d4e68f6d7595b3286caad4833e062790cc7cd7_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:c98cb29907abb9d0d1e6d257078647c55cb1a487df5ea228748a4802efb3b8ff_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:bad83a7baff83d0fdb014cefc3f7719898b6439333e3c52f81412ccf70f2be86_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-azure-machine-controllers@sha256:2d8977593f7d4a99fb9cd395d04f5e058d234aa761e5f5f4b11bad6e8a2a18ac_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-installer-rhel8@sha256:1da8e433c985b2d61ca9aac98a757eae697069fc76289688face275b78060adc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-installer-rhel8@sha256:d0fca859ccc123329308d8cb73bf7318267b7f45e980a280eb6445149e96d5c4_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-installer-rhel8@sha256:ff5c0b6a2d78009e754bf4c07d87d1756736dd11b2c3dc3ee57c27563c54d8e8_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-machine-controllers@sha256:5e57e0c3b39d9906aabae1cb0070d637fd4189c1b77ef1fac567ab33e025c3e4_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-machine-controllers@sha256:e5b2c763281dd50277fe9ca098c31c52761fe7bea9e46f7e76d9b0d547eb00e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-machine-controllers@sha256:fa3fcbbf006468a02ee7602f0c9eb7b63dcf189237c6e23718e647d924284ef3_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-rhel8-operator@sha256:525544374441f0bd29a5a4c7aab7a98a1f769ef68138f1930cc0dd617599e716_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-rhel8-operator@sha256:7939d073ed15166f1c04c8a9883747cbbb1db736c397aa5bfffc2d598e630afd_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-rhel8-operator@sha256:9740cd815427be769fb484ee4c8e929b63ef4bcde3974a3f9c75e659e2726227_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:3e2fd58bfe01bb6408f08cb891320947d889f6cce7a52c26246c214dd04e2d36_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:b35bd0d3274a47df1e3afb3dc97a41161d9e84336e0b35c1fd1b05ea2d774866_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:b7ad07b449c07cae9e0207a9f88584882ead3a733e658d9dbcc1aca649fd5ad6_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-cli-artifacts@sha256:9bbaef0b35f03c6680bab9401ba67fc719dfafd10f0f4ee3d8e67fa6da5486a2_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-cli-artifacts@sha256:e9e8a9f8eccd9052c01fd79ed29216f0338f9303a89ac437acc574dddbdedc79_s390x as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-cli-artifacts@sha256:ef127ca5c3cf674565f2d694237fe065a1478cdde2f4b9e500a2dc670fe921cd_ppc64le as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-cli@sha256:c7210ebe8b9c7b0799b4188be59bb712e50e1e26a28e0dfa4c7b6f4e9745a1c7_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (43)