RHSA-2023:1392MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.55 security update

Published
March 29, 2023
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2021-20329 →

📋 Description

CVE-2021-20329 — mongo-go-driver: specific cstrings input may not be properly validated

🎯 Affected products103

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:358284a2f4719ab93af5875778d2a973f69daf875ff487875733c3782481c30d_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:51e2043014581f30f456f54aacd983b6736b3a7d83c171ed7e0f78d3c13b550e_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:630bdc7a8b3b776a0ae2bc054e79ee521c144d7253d8c9568dceeef4be9f8ae9_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:eb3f96418e27fa95219d9681c0e9972ea491c03cbc89c9660d0264b112cfe291_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:4dfd7dd6fd8fee7d0726189d1ce79af30b136e90cf66a3f4fd99237e0b1b33f8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:5719b062468c0707e7ac8ef58786e5f7b8797ffb437ae8b6c4c3f3895b6e8c71_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:6ab8ada5c8897c3ae02d58dabe99b8547c07942735ab1b736fd609e789ab7640_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:a8240b03b675877e4fc745591dea05975f24ec0611c713595c033093d199cb97_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:31bfcf83f8c6e7a61289fdb6a739bc603939ee17d55640ee9c2496eddc86fa95_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3bff3d0cce265a2c68e9a5b9dbc9d329667e982d08b643faea571c1ec23fbd4c_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:b8f8e62b9e54133fbcc768ae5226fcffa32ded44ae48a7a8a35360baf3682dea_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:b901abb5b4eb538b7ad6ab9dddb6b61daab479029aaebc67ee3ad408aa264aab_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:97aa85f55d12b725ae8a08309139e61de7cd75b9594789ea321e1ba431ecada1_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:bde3525d829b231c4b60c8f49aad6331023c623701dc156306a48ae5223667d8_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:cb6230fac4a9f2d728492c0475bc1701d0e1b624de64f49e8b7693c9aa4fd8e4_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-etcd-rhel8-operator@sha256:f7e6c63005012bc03dfb4e4321ee2d3b18b964c22b3942ecd9fd5e364876625e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:5990243f5ac0cc53e5d420a3cd35ce0501a9ad76037a214af68009d5f2c88c94_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:79da877d3dd1e994bc2f96c57accb505d770800e9e8e0d14bce373e6fd7f173a_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:85013b2c6d4fab4cf9ae0cf60b0a188bc5eff550d7a279c0e376423894d4b6ef_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:f9e60c26be1bd0f919eb74524259c728a0be9bc1f407aec714dd302c91859517_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:4558f01509aece26d7060b037ff7658c49707c26f27f11a630581e06fa792bb0_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:57f0f25d157429ec6af85bcbbe7a1cfc6fc94c63a3995763449783f9e841cb7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:7ccf840b4cfbb0e774301f1a9ff8e35b578f4574e4b58983fedc81ac04ae3574_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:93ad2db51a81dca9e09d29e2d1a1fd13296e10ab89fc89e2da1e339c8f15d177_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-network-operator@sha256:28283b9bf70eeeac07ab3b88d233d7725411515d21056a828ff066b7d2d8d0dc_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-network-operator@sha256:38d96a6d3f325ef80dfdb76bbf1a9940fc71078bd828c52e531b5b2f32b44949_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-network-operator@sha256:4767b572d3ea00dcc3c00124cc9aa5d64f7a3b168bfe168c49a52c3f587f0e2b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-network-operator@sha256:49d358ad3ac47b7ee5acfb6587aba0b922189ff7474c515e705461d3c3309cd4_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-node-tuning-operator@sha256:9306775eac60868115fdd15d158e5ad75a90267301fdbf4257ce1e4cea23f3ea_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • +73 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:cdf6e83f94d6a9beec65a429ebea6a8f5f80c19df49feb1a78b17981132b922b (For s390x architecture) The image digest is sha256:4784b43052f3041059e2cc586f2c3c80591ff92338817a83d3039288e1258eef (For ppc64le architecture) The image digest is sha256:5f1124780604fb8de06732bd407c24ac5d6d47df52ec74531d803bd187363bcf (For aarch64 architecture) The image digest is sha256:2595defd3ac3d1b41acbf3284d9bf3eb73ac1f58aecffa77e82766e90ee511dc All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html.

🔗 References (14)