RHSA-2023:0652MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.27 security update

Published
February 15, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (2)

CVE-2022-21698 →CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🎯 Affected products174

  • Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:34b53fe7ae13c419badb03dd4139a83f18c448de12d18a0ebe710000e9d18380_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:73569bafc68b1fe23f74b41fa3f2808f9ffdc10547ea4516c76d23967cca069f_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:c8896d7203b9762c94f5d8b30b06e4199a1fe5499ef16aa9803e7ffa37ef84c5_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:d57ae553ebbe3909e22e226b38e7d6dc3eaa6d116b9f8d4e9eee6e4878740494_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:231b60e2ce22f692dd4ff39f1d5315071382d505c0098a9bee6ee9701a49bbc7_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:c7c9f75801e7478ef5cd5ebefc75249d7ca12cd9882488f1efa304ba68f1f405_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:d510f9ab0f2ee3e4244841d973b2c963a9b482dffdc2c4d6b373a7a12929209c_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:a0137fc4b94927ab2956c1c69ad01ef6589f97342a17ded8b272b70662d7e6d1_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:de7860e806ea19a3a7d49f0c2ce1e0465d24101c6ce9868d6a748ff84842b290_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:1e3c73a794d307849c900a95d9564f24a7ff10c2138384f61831e9366d6a757b_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:265a79fd3fb4b174c4610949229d8a8520f0252414b71eb91e2474ff362a602f_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:49be15b5a667b853ac7df13334fb68786fb7ef506ce2ed6fc9ad74dfd59cf592_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:c45f1910f5a615334f0ed40fd5fe898ef565e43f398cda3fbbfef8edd2f7cfd1_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:4e0870bbfa5ba4d4c35a4ad750a47141c1e47b9e5d2b2b22aeb8a71edbae7902_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:70b9fed07b69075be1fd5bf885fc986b17577bb9e03aeb455a99ead3be0fc51a_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:bb82fb908666659ac13c794f1ec2db5f748245d78c81b75f0df67a6bd5101747_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:dfe6f0518e4be923ffecf90c183a3588230ae03537300295f19cdda9c4a5eb92_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:2757b6fc54720c1de8ad1825fb071ec6e3e472ea46af6feea9f691af9988c579_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:5a45559bd76a87fb3842b6d6a888018d002311210ed8f755f08b465227afd645_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:aad952c17fc9480e69fab6fc355686df38f2c27ed547f41e90b8c971aa6972a9_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:b6c0be8ff99b05e0615bed64d6ae19ef2b96426b39392f9e2ef6266cae544169_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:34b53fe7ae13c419badb03dd4139a83f18c448de12d18a0ebe710000e9d18380_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:73569bafc68b1fe23f74b41fa3f2808f9ffdc10547ea4516c76d23967cca069f_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:c8896d7203b9762c94f5d8b30b06e4199a1fe5499ef16aa9803e7ffa37ef84c5_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:d57ae553ebbe3909e22e226b38e7d6dc3eaa6d116b9f8d4e9eee6e4878740494_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:1f0f346beed07928fb4c8cf5909a7090cfb0392574d1cdac51ba212ebf9f378d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:58d295a0e2b575c76d5f0e0a3337060c6a96678ea0bce4181b027321d26bb6c8_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:603b39a1a151e9b6c0708439418f4d31050235edbbb082aa589ec8e7d8a02bf0_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:cf51bb4361c0ff09052bdcb8fd1379d39fae1b1a7e79838607a90362e74579d9_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • +144 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html

🔗 References (6)