RHSA-2021:5186CriticalCVSS 8.1

Red Hat Security Advisory: OpenShift Container Platform 4.6.52 security update

Published
December 16, 2021
Last Modified
September 22, 2026

🔗 CVE IDs covered (2)

CVE-2021-4104 →CVE-2021-4125 →

📋 Description

CVE-2021-4104 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2021-4125 — kube-reporting/hive: Incomplete fix for log4j CVE-2021-44228 and CVE-2021-45046

🎯 Affected products4

  • Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-metering-ansible-operator-bundle@sha256:5abf438d66d7cced31b939ddb1738d6957fc53656f4b8b4ad8def131160359f8_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-metering-ansible-operator@sha256:1aa6520236d36695be64bda531d51996520cd7de4a6becdec757bb03169aa3d1_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-metering-hive@sha256:2188be3bca06635315c092bed7d4c9fde861474919b327abd0f3d983e5a91bfe_amd64 as a component of Red Hat OpenShift Container Platform 4.6

✅ Remediation

For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html Workaround: These are the possible mitigations for this flaw for releases version 1.x: - Comment out or remove JMSAppender in the Log4j configuration if it is used - Remove the JMSAppender class from the classpath. For example: ``` zip -q -d log4j-*.jar org/apache/log4j/net/JMSAppender.class ``` - Restrict access for the OS user on the platform running the application to prevent modifying the Log4j configuration by the attacker. Workaround: Please follow the Mitigation advice for the original CVEs.

🔗 References (6)