RHSA-2022:6537MediumCVSS 7.5

Red Hat Security Advisory: Moderate:OpenShift Container Platform 4.11.5 security and extras update

Published
September 20, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (2)

CVE-2021-38561 →CVE-2022-21698 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🎯 Affected products170

  • Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:088fab9c32c3403763bfe02552eddaa93b57276366dd5aed8877f43a22ba7994_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:41b49fad3406b26489b7b98734371856c408475163b040a981a3f3d52885faf8_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:d81c9df0d8f4e37e7f6f38c674e24e3b8e3eee702cbebf9b5347b125d8fb4a67_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:fb3f777e41cdb31e8a6a9e82fb27e65ddba5a22fba76b69f12677e9b10598fec_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:06d55b935101f81ef372ca5263e48c8cd3d7c4d6bb915c4c1069b0bb4d9a16b2_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:594b31ce3c39307251b4bd132abd6a9c4deca5647d2a82ba133139d4be2c63b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:b5228437b84294a31189faca05fa9114302f17fa61fd850b3e7c8a3230b829dc_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:17f54905179142f65e9952fd2fe0a7edfbee76ffc7b6a1a9f39b6ceaee2c2721_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:798922e71b4a25de3579719cbc8368770d9d6a1aa14ea3702ca5bb62913f87d1_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:20746f5e2cd948731bb6ffda7163eaa11b6d9b2744b2c20f616290bc5c4d4b8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:531b52fd0290780fe05e3d186b62187dbe8f58de015868cb06f8e7fae7e6ecda_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:c44d7e0f4314d37d05c814a926d40869f73bddbac3d7f03aca42cf3b9852e3c6_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:fe5a7b6af453faf4a53efa4469708f97ef9b6488d2dc3dfe9061d57b54c46d2f_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:485fe6f46ed99925ef1a5d6da623d8a99a7d72215a29e18c1843558726137fab_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:7bd6cefbadbf5b06b3d45cd7511e1a37d9fe562ec8e969649b658c2ded2a6361_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:8e6189abbbc50dac49d63369500c6961c3aead6eaeda8437ba3eac78b5186e3c_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:bef83f2c62777b649e4d2cd4577d1e71d270aec0dccf3f80b76fd763c7952279_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:7e8ce91ee45b54446af16115b6d541d553b3a6d669e908968827188e0ac4724a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:82abe84ef9590e75efaea0613f18caca713f243e1c61fed85d016d1af4dbebac_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:a01b0afa8479cb9afaf1a0220fef22a87e2329dcdeb7c22ed0d16d662e5b9521_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:aefe6dd2cf6c936ba6bd067aa3162a068343cd45e9729dbf81167024b0b1e0dd_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:088fab9c32c3403763bfe02552eddaa93b57276366dd5aed8877f43a22ba7994_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:41b49fad3406b26489b7b98734371856c408475163b040a981a3f3d52885faf8_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:d81c9df0d8f4e37e7f6f38c674e24e3b8e3eee702cbebf9b5347b125d8fb4a67_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:fb3f777e41cdb31e8a6a9e82fb27e65ddba5a22fba76b69f12677e9b10598fec_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:25f4f04a91e0e93ddd88e132260f1e60ed91c04ab4e078f61e5e48e1fb451f79_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:47e2a70d16c24a04c66deda36589590453e46c9a02598cb78adad9fa17beaae7_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:5e3dd732f5b4f400d06f5a96429a2c54530c9f9517ebf0a22c8795b3a99ff2b4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:9827798545598fd217af22ef2567064bca3c91d77dc3d0fb240d1b69885e3be6_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +140 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (5)