RHSA-2023:1154HighCVSS 7.0

Red Hat Security Advisory: OpenShift Container Platform 4.10.54 security update

Published
March 16, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (2)

CVE-2022-41717 →CVE-2021-4238 →

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:276188eaf16b00cddc8fca34c233f2d98dca75d7b9b6e46ea3a920ac6cba081c_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:727102af484e4dae77f4defc00a1bbaa8269dff648c5f4d7dbc3066e80866363_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:b1512a20cc9764524bd20e31aaad01a865a7e2e1d89ab4bfb2a0c6f0ea9a20fb_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:d56a38fe391211c2c3ccaeae661a32294b30e1f7c34e50802b5c5fb00770821d_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:6e4121fc6bc27f081fae0ad85ca207685fe758395cf3be16e79ed7cdb1361270_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:c41660d0bb2cbae8990827c18fa57e38dc7903b0b843b2847cf48d11465c0dc5_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:cc4447a106140ecbd53463753f9ec31364710646eafb9f941ea38809f6939d61_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:f40730dab44df83bd03e1629e19321324970d7d9f48482b59cd3c93e4f414cce_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:135ccaf7a1f4e36ac3680ab25dd6531f8f90fc48e57bd8ac42ea6aea92e7f35b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:a2e5e62fcef63cd1e3069276250ca0989a8a61b32f8b83cdc53156acea056e70_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:babf9d5ceb6ad4c17f2dde1573839d67d4210d62184495400a6783ca66306289_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:e12450dd3b2d3c22abdc850df0389b9d74bb41fb3f15bd79a1fa06ceee4822ca_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:52ea0446b32a6152240fd3bce27aaa0d82ece22d6b5565aa465453a3130eabbf_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:b29b4bc45c1d85381e61a47b7ea6dc4afc027412b6a1f416ca8092bae5702528_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:d089a935b3e1fef1f3be92462d54c2fbe14f838a5ae316c918442e2e9142e40a_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:d5c7682072deb93be294e231d83a7dd7b7f9addcf32b80ba22e0c465f0ab7aee_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/oc-mirror-plugin-rhel8@sha256:ec2c61d9b7e21e05cfccf6bf21eee956250250931e9aebfb9e5d527709a5f5cb_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:072d4aa27a59d0b7fab6cb23abfc9b9ad7d6ee319fc82e44251690c649cec503_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:6a286d72f9d8e54683bb1ad1b00f74728dfae1d528819592130b8e17a4eaf36e_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:565f1ac8cb5d30ff0b4062bfd70834908a2368f94cd513caf19672bf373ae899_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:9ba82e901b70516050dd66083d94b0b04cc1c6c4b1054cc8ccfe56bcfe587dcd_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:330bd078b8be970544167626c5bb49db18dd53de7bdfc4f6052de32eccf801f5_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:9f6fbbe04e24f42261eb18c23016da525ce7f0e7200891542112ebdc4fc84c7d_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:01131b05d53ab133fbe56a643f0b2829d061a6ce087f5190b332bafab835b7c6_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:24eaad4ce321194e315c6755ec886e56bb663674b03aec2f946308f5b5678dba_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:0644b9cc86657c60de8c0d03108162fef02eb355e01626872354f0e7e4883861_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:1f317c066823465ed5e210a87efd1e66ba861ed5871cd24a1d8e3898f17ab423_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:0826c3a0bc0a9c609c466b1731780d6c08a1d926f0d5d19db634ddc33bfcf025_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:28ce89b152b10323ba429a04630a01d5df2c01179becef3a6ea9e28b1b3855d0_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.10, see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:b13ee67469f7f85a1b1daf57424f3c7c02c3a188cb640dc6284742091a7e6d50 (For s390x architecture) The image digest is sha256:4c776be05c475ee885829444509258b486d79d8128e12d6d2263ab7cdef83ce8 (For ppc64le architecture) The image digest is sha256:2d4e0af6ca2afc8c10d210aa520aba602618f3fad4cb42636bddb57b1f0ce425 (For aarch64 architecture) The image digest is sha256:7cadaaf6e0f71645864963e6c47c75852ce68aff80c963dfba2ddf51c0b836c4 All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

🔗 References (16)