RHSA-2021:5183CriticalCVSS 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.8.24 security update

Published
December 16, 2021
Last Modified
September 22, 2026

🔗 CVE IDs covered (2)

CVE-2021-4104 →CVE-2021-4125 →

📋 Description

CVE-2021-4104 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2021-4125 — kube-reporting/hive: Incomplete fix for log4j CVE-2021-44228 and CVE-2021-45046

🎯 Affected products4

  • Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-metering-ansible-operator-bundle@sha256:d9723537198ddd114f1d18391deded973ea1630f7526563ac2f1f77b09a81529_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-metering-ansible-operator@sha256:36da829e53ab829380767ceea0f52523f769e847016c42c9245ce8b1646838c0_amd64 as a component of Red Hat OpenShift Container Platform 4.8
  • openshift4/ose-metering-hive@sha256:978ed19333959861cc7a948ac5acb790fe7bfa6e33db1b06521ef0e0b38c7801_amd64 as a component of Red Hat OpenShift Container Platform 4.8

✅ Remediation

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html Workaround: These are the possible mitigations for this flaw for releases version 1.x: - Comment out or remove JMSAppender in the Log4j configuration if it is used - Remove the JMSAppender class from the classpath. For example: ``` zip -q -d log4j-*.jar org/apache/log4j/net/JMSAppender.class ``` - Restrict access for the OS user on the platform running the application to prevent modifying the Log4j configuration by the attacker. Workaround: Please follow the Mitigation advice for the original CVEs.

🔗 References (6)