RHSA-2023:1159HighCVSS 7.0

Red Hat Security Advisory: OpenShift Container Platform 4.11.31 security and extras update

Published
March 14, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

CVE-2021-4238 →

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

🎯 Affected products174

  • Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:138e559b7e940398c7387781098d1373046b5b2ab2d9f0112492b913e9d8b278_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:1a72d33d4432638a185a8be165744a45211a938487977a1af62c539c57460130_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:576e2616bd996f5ad70dc6b5334dc67e8f64fdb2b4144e59a1a8fbfc3f6a11bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift-tech-preview/metallb-rhel8@sha256:f86dec918d1516d3fe731fde320e24d7ab14f2e789d20e82a0e57a69d1a89089_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:1cf5245ff1f729b7c39ce2c660d1d5cad6974d04b363e57787ba86f0c89a2fe3_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:44fc88cada704c9c7182622b10f1194d9106a90569133027f97be9e82c472745_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-event-proxy-rhel8@sha256:a4d54bbf0367ce6df896acdd990b12f2e9d09ef46d7ec11b7f94569aa21f16c8_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:a4c193c81b9033ff7e1d985f3fe2b614949f3fbd823d10ca2ed3f356d9a53cee_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/dpu-network-rhel8-operator@sha256:dcde0d8d7d3dac9a31331ad435aaf3a419a27219f14b3307fd40255e4f92455c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:0d23e08e1c06f26d8cc8c3e42375fc2e1b61d110493e4653e7545bae1e312777_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:1bcf98aa9c96a476c40b04a180219cfc287cd57537da76e0c8e642ff49bd876e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:da9c5133065104b25ded9bdc7808e61a1c126d880a4ae038ea96062f6561bd48_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/frr-rhel8@sha256:e8d1e3bb0090e3fb0d8d72d7de05dd9060cc55a2a75f2759ae08e571ccd8b9fb_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:4caf4ecc0b8754a8227b94f45080ae173d95e7f14533eebf7e8b780bdf90ed61_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b9ad0f48f42cd0b53178d042142d764a49c6f546f246d61c90a4d5094ef57d7_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:9c4d55e224c964465eaccd68aa20295aae1a50f142bd32e77fc96be32e240297_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:ebb0963c4a90e9682413dbb4e89cf664be34961402acdc7acb6727afa039ae35_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:a8e0511dd808e8e22b62f765597a1ecf1866039e93463f4d4d40424f2e91c148_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:d8852774668d232f89707bdaeb790975f540dff8389abcecfa09dc568cd20c9c_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:e58742d6f4b0c34874584c5e83eb2c097e6807186cd012a7e4aa9acb20d1405d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8-operator@sha256:eeadc4092600751f18baf6280798e5d2307d9741adf6d08e2e45a2daa18b3260_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:138e559b7e940398c7387781098d1373046b5b2ab2d9f0112492b913e9d8b278_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:1a72d33d4432638a185a8be165744a45211a938487977a1af62c539c57460130_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:576e2616bd996f5ad70dc6b5334dc67e8f64fdb2b4144e59a1a8fbfc3f6a11bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/metallb-rhel8@sha256:f86dec918d1516d3fe731fde320e24d7ab14f2e789d20e82a0e57a69d1a89089_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:35acd6090f44c2195c7edef4ca43802118cdd3851f33a56652e4247edfd22878_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:4591a55b79f52de6aa697b953a3c2f0838557113a927206c307b8f2d4e17b52d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:eccc42a87157815c9ce779ba8567ecbdb886d9b8691bf5d863225ad202da555c_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-ansible-operator@sha256:f3194102131637503c3ec60368d84e5a20a3ae0095b8e048a15e242037b77ef0_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • +144 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html

🔗 References (4)