RHSA-2023:1297HighCVSS 7.0
Red Hat Security Advisory: OpenShift Container Platform 4.11.32 security and extras update
🔗 CVE IDs covered (1)
📋 Description
CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be
🎯 Affected products174
- Red Hat OpenShift Container Platform 4.11
- openshift-tech-preview/metallb-rhel8@sha256:672e1a95cb3e063145a853a729b81c49a0e46dab17bc8ea81c3e2e4c012b7b3c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift-tech-preview/metallb-rhel8@sha256:9cece3291b894217c3f4a9a3e6ec23be69a4b15252f1fafc90f925e15fd7061c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift-tech-preview/metallb-rhel8@sha256:d5a3f67012f0cf908821bd8da2c761425b5b36206e0b1c52a54598c497260e37_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift-tech-preview/metallb-rhel8@sha256:fd14ea0411a37a4d5ef781a22f6b9d6f1fe17b57276b25f5a135169a0042dfd3_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/cloud-event-proxy-rhel8@sha256:0bc16bcf9e9ff7e27781cf28dea8db6411bd47abe117ec20f7965d32489a160c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/cloud-event-proxy-rhel8@sha256:6d2ddff70ef6abc5a0700318b0ffb9d5288cd7fc78ad32fe2e3ae60b89566141_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/cloud-event-proxy-rhel8@sha256:8148aab06e4f3d4fc8252685bc0d3fcd58e610e5caf9162744bb4234251be5f3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/dpu-network-rhel8-operator@sha256:578beb380234142b67b2c09b5d2416f220d4de42f47455b68806215791c2b40b_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/dpu-network-rhel8-operator@sha256:580e0b0a7541cca8d4854d1a5299abee445fce4050ca560395a9b7ad103309f5_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/frr-rhel8@sha256:4569265bf49c23af059803bbbc3754f4a8a7f926a71fca6eaa0f05f875bf7710_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/frr-rhel8@sha256:53cbb0897eae4766611c41542361c32ae971089a407f6d1df7ce2cb16fa19e09_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/frr-rhel8@sha256:7c3e0a823bf799bf28bf893417cbbf9c1adabd68dcf4ae4665218aeac2da85c8_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/frr-rhel8@sha256:e5d690e064e82b6ab9fba82dbf557df2d97ce4d1a616e6de0f42f0e585be847d_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/kubernetes-nmstate-rhel8-operator@sha256:056d1739f0fce19f1de24d5e7b241b26b1f337f6f6224da6037c6f9880721caf_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/kubernetes-nmstate-rhel8-operator@sha256:3450e3bed4e2234712dcc4871eea0052f65daed21c1705d8e569131b6eb8e726_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/kubernetes-nmstate-rhel8-operator@sha256:5f291b4ad39873507392bd79d5e2a3668fc0d0c02cad6d97722bc2924556d8e8_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/kubernetes-nmstate-rhel8-operator@sha256:cf479e26648bc7306e416d187ba05183f044274f89ee95b9f368e16ee7d9c27a_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8-operator@sha256:19726703ae3de3a841071630f6d426bf12cb78f0d73d6e550ee91803113f8404_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8-operator@sha256:5105b0ad95a7dc95527435883cc46e12efaa39a33dca3270043635de4b24da98_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8-operator@sha256:5ea34a0846c603605b5c5d639ebce535679f367c986e37a93ba79529e2cf7db5_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8-operator@sha256:a2b76af16a01c0372c6fdc900fd688d9be8180407ae85f72d71c3cf820a110c5_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8@sha256:672e1a95cb3e063145a853a729b81c49a0e46dab17bc8ea81c3e2e4c012b7b3c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8@sha256:9cece3291b894217c3f4a9a3e6ec23be69a4b15252f1fafc90f925e15fd7061c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8@sha256:d5a3f67012f0cf908821bd8da2c761425b5b36206e0b1c52a54598c497260e37_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/metallb-rhel8@sha256:fd14ea0411a37a4d5ef781a22f6b9d6f1fe17b57276b25f5a135169a0042dfd3_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/ose-ansible-operator@sha256:1a62ba856408dbbc908ac1dd7b25ebf25deebc191afee4733dfb9f165b7b3856_s390x as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/ose-ansible-operator@sha256:1b70d959415f6708ad839e377c2f05b34d99c3578fe568587552a4414b142a16_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/ose-ansible-operator@sha256:8bf8c82828c97821ccd6d750568a4266a4fb9871e21569a53a6930ac6e96a06e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4/ose-ansible-operator@sha256:a3784ee8b0f09d4c64ce6398ca085291c2aa3e09bc677c28761328e998117236_arm64 as a component of Red Hat OpenShift Container Platform 4.11
- +144 more not shown
✅ Remediation
For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2023:1297
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2156729
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1297.json