RHSA-2023:1656MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Published
April 12, 2023
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2021-20329 →

📋 Description

CVE-2021-20329 — mongo-go-driver: specific cstrings input may not be properly validated

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:45b3f4bdd9e9603f2a1f5b418ab3d32626afc113cd6a03b21475fac1e4fa7ac1_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:62c097b096be2127a63c53596b41d1d89ea26b394b09e222d0394aa86c347995_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:d626ece67a7cc8e32eda284c8112d716c4fe670d5049edf3ea30973dda64d19f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:f49c6b6481b8d5c143e86ee7c988c402c93a7db26a0feea0882824338967544f_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:2f58093ef17c1133a84ab2207dbe51b269b3d27780d190424b0ca6c819c58d75_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:8b753f546ad33e443946553660e2389b350740e3f8c5e813bda43cd2c9765927_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:a2b954dbf630c96efd744a24ff10fa7dfc4af6ecf8c13cea85738ed74eb0ef00_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:ee7634d40abfe8f8c4e676c0c331b708429ad6dee70b6a987511fcd25b2cb5bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:0426bfd72e5b5458cca78fefa34a7d34144d811812e28046738b6b4615738580_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:860ff42711a5c1ae1f1ae0de1ff154777e4e2cd1558e4742785253186c424f9d_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:8667bf8819510c0679232fb38a68ccd95b9d8dd8f9e054eb8cb1f1b16086b230_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:b94aa45c8d908a7d1e3a5ca208b35916647c87a7209039ddd74f713f68ea2c3f_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:0d33307e3f5134b83d24bc2b66b95c1a22a84992ff8137d85e84f2ead5b55e22_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:70c872b8d2072a19e390911944dd5b37b37ad6f4b469ee2e7cc636ab05c87d49_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:7d3f925007db28fe5669daa27ab310de9397bbbfd68448620ea9909ca0c2d7dc_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:e03626364e95eb2dd53178fe114f6d205b28aa8bfdbb4cb12692f54ea62fdda3_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/oc-mirror-plugin-rhel8@sha256:1f1a94b532ea33fed98c058117c54d532881b3883d7f588d4609e0357e4c757f_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:4dc000ba92604762ab22b73823c8b17cfc10cb561ed903903f106fdda450f66b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:03b1347c7200b16d98bb62032ba2f69c8e9b87528524d300a93d58f1c231f931_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:51eac86a62ad3d8c22f7d1e7c947f7f3a71fa5e3e0b46d81b9fd6f8384af6f84_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:725071e16733b05992f45793256ae4980f1a3468e3589a531d776947cef67efa_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:124c322b9a824829febd14087bfb0a3494216582507731558973a50d6c02efac_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:c9aa88f51cb7250be0827ff083896b3ddb74ca85f92488f9e1479c0231d9f393_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:3f2996a3799d9b05dd5bf434b20ff6ba0a2851e7386b8bab45b90d4729ced610_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cc3b68b0b116bf53c0c0af9247a16743d13e701f969790f93cdda9f276297e6b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:5815376fc3d86378bb69ea040e49cd9636d3d73ac7b0efdfdf67d021212c12c5_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:d31aa61ca92554f7881a647668fefb399cc589384414dfb5df516ec6142beb3e_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:6d84ccf370d2a8fd3a9f3bf907246b8c953f0faa17f49309290afdfdfd6d41a1_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:83c248be560329ea1a031087ea106fdbc649ea26fc9372acc37eecb015907c6f_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:60f6c51a852f084a020c3dc32b92cbd91ed293b82c6c5b48aac51460566688c7 (For s390x architecture) The image digest is sha256:2307b63fe771e3f1ebd5eb30d9bdc429ecbfb86833943b61cdc48847e8e11461 (For ppc64le architecture) The image digest is sha256:166f394473cca2a379a4915fb6631b7232078d7eb0e0eb7ef99133f8b6d48b9d (For aarch64 architecture) The image digest is sha256:7997b03ba9ee7477b242d57976244a8133fc4f8402a8cc83081accdc08d9a715 All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

🔗 References (15)