RHSA-2023:0728HighCVSS 7.0

Red Hat Security Advisory: OpenShift Container Platform 4.12.3 security update

Published
February 16, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (2)

CVE-2021-4238 →CVE-2022-41717 →

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:0db19361175a863f9afdc2eb56f302bc6c3b4d08e357eeb0ca295331b5e3d354_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:54e9b14c7d881d40dc29a8c179466b91acdff32fd18a9d90f2a83dac4aa0ab5d_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:9bc99412e353122feac8b7d4ac226b0019ec37ad352ee8e61f6ed3dad7aabf01_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:d86f1724cd7cff625a7725e991a4b0e30871387fbf59ec05ce35e1bd7878dede_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:3685ae521164f7dba5e0648bf7760d30462913b4d25cfb2c4399135268057a6f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:3b3a9d08d1b9626b2ceccf748cc91528792728fbed5c31f47d33552f688ecc3d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:c2ab256f70e464e73666ea7604f1addc10032dce1935c53a69738290adf62419_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:f43ee7938251ade1f1aecd142bf50f9e4520e0f72718c8bddb0f6ce82c600a3a_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:4c09f9b6acade83cd0cf46f184be48f3fe4a7aa4a4e1b3030d71f36ae6845677_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:511580e0f597938b34f7fa833bc38bb3e8709e8d7bb1e7db10a309fd0fb993c2_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:858e7872a4fa667f0801f67e1f2005087f8dcb06cc5b279e8ad04b3315731a17_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:e426773e776d034ad5bd62bf0b7256828744990fda46b831514d426d81598f3d_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:3c54c0792f7f7706641292f66f55b0592cf598aa0dda17c6705fcaa3f3825290_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:492bcfc13fb7ab4691cbc5b6c266f8d0439bd6f80b6d3f028049d46ec0aa2ef8_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:6fefac556354167e69717bce8c0f8bc2142173ece1a0385d2e6a012665fb5444_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:af8b7a0c6aa1ea9771936d1976062fc579b0643bf039b5155161bb8c5e38f2bf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:2814ed6446ee3a365b85ddb9d4f6680293697a5fd4454dc49abd94d90ce27e6e_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:52341ece5f90761a561de957b9beda25fb093697e1e332af5da2d8dbc03219a5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:9b91c739f7e96417a622b1cbb5594b892b46cb14497d6a6e719a22ffd64a81e6_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:dbd36dd5ff82b8e4b0f8903f8942475b1b4077302ebbd5b27b7c7a223ca891c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:f200becffdeaa669ba9c5d313a53bf6e507dbb5403be77c81c0b1f9980759e60_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:1c665fecbb162eeacc2eb75b84a0741299ffeae6ab134a7bf5f3be9ed9f9b579_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:3b01838c0d3232313b7401f856dc6c7b943d2cf3096e1f514453f6c586989336_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:3cf3b350bd5a68ce154fdfbc149f94abd1100b7ee1cd038e25ab12d901c0e0c6_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:875ec3dd3f9a0f6c1647558af1ce9a936092242db69933371f2373939578b94d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:1acac7e5d1ced750084f241d876c7c5199d7b2f774dfcdf85db9e29f5b95d6e1_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:45b6358bcdeee6b02db0aa3d04369cb69063d139740d64b80824a4cc0551a4f3_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:63fd18271a731b29dd5931e49839f706019bc13bb6f2f7dd4b8389ec4429aea0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:a43a56cf8dee4af20b50ed39fd6e8a8859f0280887107ea194bf57cc65d5ab40_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:382f271581b9b907484d552bd145e9a5678e9366330059d31b007f4445d99e36 (For s390x architecture) The image digest is sha256:529e7aa3a821892575abeecd4971dff194f48943ce364a01d93c599c27d2ef9c (For ppc64le architecture) The image digest is sha256:8db6cb445bdf1534860a1a47f8c50bc73d99dfdd196f06184acbcea5d7bc112f (For aarch64 architecture) The image digest is sha256:4657924fc2720f48932dec10380428804e9d82194f8ac748b7329f7c18021ef8 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

🔗 References (37)