RHSA-2023:1504MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.34 bug fix and security update

Published
April 4, 2023
Last Modified
August 22, 2026

🔗 CVE IDs covered (2)

CVE-2021-20329 →CVE-2021-38561 →

📋 Description

CVE-2021-20329 — mongo-go-driver: specific cstrings input may not be properly validated CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:51cafbec28a73ba83196c41d7bb4c444189125fb6ec5de6ecb00615d087256af_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:6b4c2589d594aef6f95ce7c318daa7e8279da325bab9a12e629181c96d822990_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:954ae8bd4095bd05daee5cf6a13a93756568d4a60e21c7e090c1c8fdd9782c47_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:ad19731cf05c33f71d37b34982eb9a302096824c17fb0d682a6921217b753ae4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:93fe6ff7e66c02eb9487e81940ea53647f4849116d29c4e8188786e0278aa4ed_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:a03f9036f5ceba175fab0a9cf63da9b5c3db1820602d6d522b1bdf9a3222ff28_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:c57df447721a3453ea2bec868cd5d102d884b954b696b7306657b422ff4baa20_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:f0bf69b39146f0db5a27a275305eb963b526e088ca4a3f7f9f1be5cc8f37bd0b_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:16f82cdb4b36f3b88e42c0b17376a8d5607f437de643977f65fbf30b180e8ff9_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:187f12a98f5bb571e70a48c529df01102f51e97d2578eea23a794af41dfe8274_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:4831fa961551fdd66584f8f7bf11101a514d27860e9fcab44a954b9289b50ce0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:9090f181d38cfc24e1422fa513b4f6709625f516802d65194cb103abb74aebc7_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:1690e02b07ede956f970010a9732561eb51d86917d2cad9bdc1694a6490e3b0a_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:74c57c62477c3ebb977dec35a484d34ffdce346533988e04e1ac75ab619d3193_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:7baf80ba806549cdf3445842ca55d20e9ebec810c3fc0cc8fd4a36f6c829138f_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:d2b161524a718eeeb1597182738321bbc1f284d59f950221a470b1d85f79c6bb_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:d6cb483a607b4676a738cc473adf9e91b6811aa1d1e8ddaf9671ed40c9aa04bd_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:036a554bfbca53b84cd318e088e0f00965f45b706e3108fcc3250f4aec43e3f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:516c338efd310ddc5b88749e0a9986da50f192828ec34f93f72483c51eb6243a_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:6ec7e4c85e439b141d251cc8eddb91b32a946a3a86e5b681182d19af9bfcf8a8_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:75b440562036daf7a2efbdaa47f8697ed1dfa3762e8c0fa5b343b0a561247196_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:2510fd5712fc81286dae32c64a0ff35a19e0c85615488b9ac52c53000b8950df_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:927f1d4e2350e78378c2160f20d20e37547e8fac30db234a33f83ce14221e3ec_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:be766967972db490bb455837b3136b3e29f3a3225439bace57d3968daa18372f_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:ec2735175b523baeea76394ac7047e40bed07a0c37721c3291cfaf515dda8414_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:3f61e967b150006463253fed51d8be1f92c2e02b9bc1d3530a0f208662a334fd_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:72006f6b321f46c7c066037786d32eb03eb51f6fa50b2ba16c258b9591fb0170_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:a637684fa04cb693585f4000d3eaeee3254b471c26e8e24d5472149be431854e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:bde4577777d35fd73e8e4e7eda8166522bbe9ab1fc121b751f739336d50b1344_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:dbfa0881b5814ca79c1cd991fc890b666561b4ca58b3f673d79a31c900a0efbb (For s390x architecture) The image digest is sha256:b30fabcb5886123ffde14cb306208484d58843d93d1c1a315533d3ae825fccec (For ppc64le architecture) The image digest is sha256:88c4e73c995260d8b6ea5ea3a99915f67730c7bdd4016cadfdd8b1b090c76507 (For aarch64 architecture) The image digest is sha256:df1bab4bbd42ebace4557c60e392329ba1fe86ab23565c60efbaf51110f4c019 All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (15)