RHSA-2021:5184CriticalCVSS 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.7.40 security update

Published
December 16, 2021
Last Modified
September 22, 2026

🔗 CVE IDs covered (2)

CVE-2021-4104 →CVE-2021-4125 →

📋 Description

CVE-2021-4104 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2021-4125 — kube-reporting/hive: Incomplete fix for log4j CVE-2021-44228 and CVE-2021-45046

🎯 Affected products4

  • Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-metering-ansible-operator-bundle@sha256:e271e3d409615875e4545938fdeecb4711dace24635ec2eb2c09549986fcf5ea_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-metering-ansible-operator@sha256:2243ea096f285ca59041de4d3362687f660fdb3a7e0c2c991a23f121958cf162_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-metering-hive@sha256:9b71fce5df4593cf6897a2080e0b734a925ce4e426029d2204f106b546e560a1_amd64 as a component of Red Hat OpenShift Container Platform 4.7

✅ Remediation

For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html Workaround: These are the possible mitigations for this flaw for releases version 1.x: - Comment out or remove JMSAppender in the Log4j configuration if it is used - Remove the JMSAppender class from the classpath. For example: ``` zip -q -d log4j-*.jar org/apache/log4j/net/JMSAppender.class ``` - Restrict access for the OS user on the platform running the application to prevent modifying the Log4j configuration by the attacker. Workaround: Please follow the Mitigation advice for the original CVEs.

🔗 References (6)