RHSA-2023:0895MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.29 security update

Published
February 28, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products84

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:12c4ebd76a3dc6ce85005e2f11de6fbfa6384b20e6237c28627e04fca6ca4a89_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:2f12bfd2147fc5e12b7b1e227bf8fa5c163e452c61c37d21589192d18b339b37_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:4ad4fc6bd8426948534f5ccf798489c98e09657a22187675b48ffc40da161241_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:b0f9834755721115de86aca24b1338c9504c5b08e9bdb560daf75842fc1119e4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:00723bf0bbec82bdd81c883c2ee5b15bed793971ee296e1106ea73fe47b299ba_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:4588d09572ee62715ed5c555847141f839863ef9f7aea463409c25673793a57d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:62a32e7b7b7b69b48936d1b8a698f201b786a43534a6206972afddad62c5d334_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:98dd10fd542e7bfe727af4d0537570561c63120e53f966533010a440030f787a_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:61130ec751d6a41a8995ad2deb0632ff0bbe62139a2c7725ab57692f882a2954_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:9bc8df9abd538914d515c4ef0a80cd0706feecaca234d529e5f23803fc013a06_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:c3a3086323cdb469f6b7cc4ceec2d0637134bcd2973fbcb7c1a52b4c98945fc9_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:c6d89b7475dd2467e8f167f05bfee26af2af44659f26605ab94895080f21512b_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:066ca8a9637bacb8a8fe30ff330a5fe3aa2a22a06c018e32982928821f4ef187_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:1d7a88fb1d37d362cffc566a9ce00b0a3f3c3d5ae7e2b977463febc523ea6254_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:304f1fff379b3d17cfec319961074e77eb476086971e1c1de8750f4fd84b53ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:572bfb7b660e58698270677063061d52f23417ab920fc2161e4d66df4ffa2891_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:074b00815286380472294f3c1d17b100da3604c33096b4c910ac342ef7d992ec_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:45582c631f75a13eb586d9a6d8bc188a3685586c4cb13c8a11333f0ba123752d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:def88d693d21ceb54201c1a51d47cdf10f286bd31b5a102655a4321ac0eec424_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:fcf0d492d02267f52011f98bc9eaae3159977cf111556f5f0f3f2d4a43a2864f_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-node-tuning-operator@sha256:03c0545d16743b4cf0e9ab199de44b05dafcc8974930b1e59fc5f42581cfaaba_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-node-tuning-operator@sha256:27a996bf3c97c553b203ab98aee2f2f393b6d618cdc2055c457689fda346f127_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-node-tuning-operator@sha256:6a22f0a16bd43f4a3253bbed8a97497e5d0d2fb7ffb6c599400d722dedc213a6_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-node-tuning-operator@sha256:e3cf02a13c7a70f1791f41e5353a5fac37b03c78368d88ea937a7ff83a6fe4dd_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-console-operator@sha256:270574794b7e27df9b195791d02960c58f5d135285f8b7439e8c818994c659d1_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-console-operator@sha256:c8782360c38ee7355069d643a36e1c4bb36db9aaaa6d280d3b14b25547ad20d3_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-console-operator@sha256:ce9f0851ef4458e0244a359cfdc9fcc9ba773f5d99206f4510c058c9ed101ba0_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-console-operator@sha256:cf52ecad6ea42ab7ab6f12147a07e7214a8333dd63543594f7230b9d7f959869_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-console@sha256:dd9131c2cb2638faaa92963ecbcbb28210b4fba7cee4ae00645b78577af01a7f_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +54 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:1105aa27f627a99a2b3a8b6257a12697b2033a44f1fa2af41491a8e66cd279ac (For s390x architecture) The image digest is sha256:65ad21140d0ab515f17eefe4fe12a05cfa5dc7422c09569fd141905f0ca8052e (For ppc64le architecture) The image digest is sha256:3fa53f4050d344ece7154e3aa40d2c01ec6b054aead77ace1d2f33651d0ef35d (For aarch64 architecture) The image digest is sha256:8f1cac0afb3469f853e8f630c59a476ca77fa1144be761ba24d59ed261a6c425 All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (14)