RHSA-2023:1525MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.9.59 security update

Published
April 5, 2023
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2021-20329 →

📋 Description

CVE-2021-20329 — mongo-go-driver: specific cstrings input may not be properly validated

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:38659ce4baf64e291427f4c8e85495891095a9911a22b6711295640e1336fc8e_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:bfad1018f5fdd4724a4372f8c65164e3ee3d05d7011fa5b1f451948497440542_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:ec545cb6d0b830361071c406ea4c2ffb20ac252b4752968423443e2fdf363454_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:eec5158d327bf4ce12e68fb22062ff540e9c16810b7a2b1b2e266b03a7c26f68_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-alt-rhel8@sha256:584a0c2c5a65c5e44b301de332f0acfe90c146f77367fd16954ca2f0e5e83722_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:2a6cacce9fdcc5ddddb75552d1bdcbcfe8da894fb34ee4fb81b315fa8ee69d14_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:7531ea3b430bf6da3a4cde3d04984ea8aeb42afa022ec5117f1b73059a0fb0f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:9f78797842235e742acf37c44339aa35c6caa3edd508a7bd741c44afc27c8e1e_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:d768a0b21782474ea09dbe050b6d02a0dc770761cfd0f880ec30c161d5a3f116_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:39d7368ef33eb1e15b0e999cc608520f677e64caa2c3a17720bb6b81836f65b7_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:3c95c6b59e5369c48cf8e0598829754f847a72014e016130810e9dde3202cb66_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:6b75132fb0df546ef9ce407f7fae3ed6264155b8659c551ce75715cce7aab57f_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:b459aa38d31443fd07c5486b3779d53a0e3370c6a0feb5fdd45fb4ce1032af92_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:69fa9c6f191de2a9690dd6e8f6f449f54b77e28e27e584c803da343939751930_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:973268aa23c97ead8beef6353d095a76c9d9edd9ee17a127ef3891d0bd5f2606_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:163983eec94411f3955d05571f3a721f89eb5278ac112dc528cdabb0a44db60c_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:d3fa47465d68f56c67132936a8b7edfb3170ac01505e2f8b3ca44dd4525b71ae_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:56de5afcf832516e085d7b075da1570e8c26abd9016e6a6d2c4c220cf85b1866_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:6faed119e16c8f28f3d570a4ca9d1ebc4919470974feb5ab6c80c3eb7e31326d_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-machine-controllers@sha256:79e35d06c9e4d88c21e5f2199c6c07c49d110aee89449a14446be430a0174e96_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-machine-controllers@sha256:7cb94f338c632854510e1820521281ca6b78639f99f332ef402208c67c7aa4a2_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:05cde9b05a6252c4f8a0ac328052971c51fe1e26877479bb22c87cec28ffb9b3_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:9f4d64f25cb84a21616c0d98a19da6a1de6ba4af9d3620a9b080a1ceae451e6d_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:61b91020d1f534ff429d59bbf861216e0d655f387fcda47ef6be98025de08839_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-cloud-node-manager-rhel8@sha256:5463d8659aefa9f1b1715545d147c1160bfcdc64ca24dc0bd64e9c959a59c035_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:350268c72488c924518c03ede2a2eb708155901b253742141afb0053f703207f_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:c37e290cd62b86f68e1f1da7fb1c2c9b41d6d0de072c19f85b9593dc97e812ba_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-machine-controllers@sha256:005a04f086d125a50d990c00960f7005c5db4e7bc5418fdd71f8524e48f495bf_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-baremetal-installer-rhel8@sha256:0b0e00a77a9df79538f2959a1268bc1467b3721334dc1e1942f2597472243372_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • +170 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:b22d8c20d3f7fc0afb8654f5df4cfafa8230ad6fe58c0c48760c3f42a3aae5fd (For s390x architecture) The image digest is sha256:8f0821c7da21b63df30f99572621700c4a2bfb1cf7570761f03c4fecfacbe548 (For ppc64le architecture) The image digest is sha256:2629197b0a278178d0350a6fac60ce5f2ff9047a6bef6f6933d375a029f6ccb1 (For aarch64 architecture) The image digest is sha256:5d043b2f061c4b0909b87b0c3ba8995fa2e20cda290a807b0a30722a0e8b4ce7 All OpenShift Container Platform 4.9 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

🔗 References (6)