RHSA-2023:1393HighCVSS 7.0

Red Hat Security Advisory: OpenShift Container Platform 4.10.55 security update

Published
March 29, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

CVE-2021-4238 →

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

🎯 Affected products43

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/bare-metal-event-relay-rhel8-operator@sha256:0883790e174cd648cfaf886231b9abf65121f0a24f43a336eb2d12c670b26ef7_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/baremetal-hardware-event-proxy-rhel8@sha256:fe374f1236a2f2e928cf10323529e8e0025ef355462fac856dc336baf4a62ae5_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:303d390bf4ffe505c32f9f194962ab5af8b326e9edbd0b4495458003addc548e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:6ca099e073de9c977862fabeae086b913558619d9709acf2a7cbfc8f0c39d0c8_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:7f802ceed2dadc3ad2890a3abca0fde81e5274a6a8a77e447973280519dcad84_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:b579c497453268b1c03a1c414c94163501fedd5668eeb4f52ff66f262f0363b8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:904eb21223125b6f1f9add0a2609ea0b71a153c0465fce6476ea2974543c4f6d_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:b69bca31e3800809788cb197a7cb458822cb9bfa70c86d19f32a58a4146a070e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:d42f8d6e2aaba7aafe37f8a58e8b13c65534954b44f6b6ee611f766f69eb9d76_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:d4c6c8f57fc82da8b82951275ebf112e47136dd57c7e5bbba11679cbe19ea10c_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:3af99d3279323f6eb668da441d1e857c1d37da323365e62c321487f0b732fe5b_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:9311124a5e1182c1e176424b467f16491b1abb51375c9637c84f3e3ce62e3187_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:d350076196b9273058b7dbb112b2550850916ebb3e8ebaa48a8eae98d16d3a74_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:d7ac6ef2ccdcacbdb13c9deab5ba3e4bce351c3c078363ab79b8de86047d255b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy-rhel8@sha256:303d390bf4ffe505c32f9f194962ab5af8b326e9edbd0b4495458003addc548e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy-rhel8@sha256:6ca099e073de9c977862fabeae086b913558619d9709acf2a7cbfc8f0c39d0c8_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy-rhel8@sha256:7f802ceed2dadc3ad2890a3abca0fde81e5274a6a8a77e447973280519dcad84_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy-rhel8@sha256:b579c497453268b1c03a1c414c94163501fedd5668eeb4f52ff66f262f0363b8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy@sha256:303d390bf4ffe505c32f9f194962ab5af8b326e9edbd0b4495458003addc548e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy@sha256:6ca099e073de9c977862fabeae086b913558619d9709acf2a7cbfc8f0c39d0c8_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy@sha256:7f802ceed2dadc3ad2890a3abca0fde81e5274a6a8a77e447973280519dcad84_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-event-proxy@sha256:b579c497453268b1c03a1c414c94163501fedd5668eeb4f52ff66f262f0363b8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:3743870f2c4b0c72abf0906ac5c2c8886745d615b6c3b3ba2561e410ff421ff7_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:50477e3753e8ee8fd44fb9632d173cf20d1f51c4a7a6564b9b075dcc7457ffde_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:77fbc365c7ac856c2592eea74d9f64378bb65e01d20158b1c14129be628af596_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:aa37781503907cefbcc0da9d7432bfe425505eda9051b9c80a9b4462a6b03fa2_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-node-problem-detector-rhel8@sha256:1c42b86c906f4b1254b534e433684307f1cd3e133a9bde0c1d48618b21b01d55_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-node-problem-detector-rhel8@sha256:2e2b9c69cfccdbb5a684ce048d816a0bf57e745ee44907c10c70b8ae547dfc54_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-node-problem-detector-rhel8@sha256:3aef1c3c585b1ff740a3202839c4c9df24d88cd128d3a3abdbe106d8032b2837_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • +13 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html

🔗 References (5)