RHSA-2023:0890MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.5 security update

Published
February 28, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products130

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:2317566de0f257824557d066fab5f65abf8b2902f378a9a3bcb16bcb5d64a00b_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:50389c8b88c7bd6b1d3b408e5a74384480ea31d21d184e2a70c4aa6b0ad2a81c_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:cb13d6c6125959f9973d6712a15e8d813567565df7b4ce541ea0ad35977cd743_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:df42b4785a7a662b30da53bdb0d206120cf4d24b45674227b16051ba4b7c3934_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:2046f7708da1b41ef0e82a0058c3ca228289f70b9edb423011040e5d78833cbe_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:2f49deacb5c23db07f274d3640e515554df4c52a552268b99c2b416269d424bb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:5c6af88bff213934145ec389e05e0a1dd1163bd99cc2c762299b634f7c763416_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:b1263a137f405f49ce72983b54ec05f3db2997bd040793cd1512d7f49bb6cb4f_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:05fb702a5c693a1a802c989c4093a332ef2fd2368f25ee3ff842a4a085824218_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:12ea8377961365f96b14b278e847a56ed4b1249a3207e37490740872f345a126_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:9833c390a1f89073102e09dd49cd7bdba4f186852b6607fe798e05eea1e3b64c_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:f503bd48e1a6636a96ad761540e57ca4c4167d272682cd7b928df2f4038912af_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-baremetal-installer-rhel8@sha256:3000ff52beee58fe3ec501f4649ff8029904f1e851f27a8a484d406764ad7eb8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-baremetal-installer-rhel8@sha256:3633ab206500d07e733841f949fa4a399792b7bff743de5942955eb3ed027dbb_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-baremetal-installer-rhel8@sha256:e3f9a8320c2f57783565a7ada6ec90b7f513195f2ce2970ee36ce7873641c490_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-baremetal-installer-rhel8@sha256:f93d964367dc69ca66ae0cffda9f6fb7156b1c3c3ab4f5de9c28007690877755_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:15bca556287854e133330e866f50d4695ea91f4afa20755340b63719c59845f8_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:a771b18688174e235c80b713152bff7317ea1db21376d98215c40f9d9143c4c2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:b83e998833913b0ef6f58d1262fedf20ad033c7b2d573839aae9925809c23dc6_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:edd88cb82be34130ad52aa1d627a2e2c0527a179e7539d132937d28a2be56ddf_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:5b8fed4422057114be1fad31af15aa9f5a0b7b19d5c81dd4f3c663a2c0a50327_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:63362cbc3c7dc8b5bffcbd4f3a69febac913a52ff0bd6598923955d4812b4938_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:839a3d3de92a2dc5771df5c2faab347dc24f30d601e8c2121d889b3051def878_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:dc8932c1783a0d57c7712ebed78edaf4f826ed93a4ca36815cf4f65ee1aa8ccd_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:009e95dc03680d408b1db99abc9aa9874963318314fadba013c9044ed4474837_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:b950e2b365cefb50a356aae8c29493cf15a77f3562163a8eb40503e0610a2ee1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:dd79acf9a4a2d639fdf2b90e1434a8d17ea933081e0fbb5ed6270e3e88301d23_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:ee6ae5431b03513b5e1d9a603f5540d8a9d2c341d6410c8f44c5fe9673765ac6_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:10c3de2c4ad314b38c86f26c4779d8c4cd73a4e3efd29d93a1df0865fa7faf72_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +100 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:fd65cebce150bac3c622e30e7f762d3173575ae3541b3a7648819cb63e9b63a4 (For s390x architecture) The image digest is sha256:937b52bf3320896ec90da1444ff76c8c037d0a8631f541ca6950a847aaef7ca1 (For ppc64le architecture) The image digest is sha256:2da6b8a9ca11dbec1a8bf5dd8e49f52a96d09b7e474fe109ad85fc0ba071747b (For aarch64 architecture) The image digest is sha256:d9001785543f8855ea653493aea8c8c6a3ca029565e8d0e282cfa11b06966239 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

🔗 References (35)