RHSA-2023:3363MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.61 bug fix and security update

Published
June 7, 2023
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2018-17419 →

📋 Description

CVE-2018-17419 — dns: Denial of Service (DoS)

🎯 Affected products73

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:3c43f14eed3bd5daca19630c17959f117369fbc57125e23439075fe9348cdc52_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:735ff2bad1e2a257de4342730127fde0f4ec58b681a1c418b9eb33b510c557f0_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:937c46ea0b52514c0c85285fbe3b6f3ad4dcab489bfb35063c72faa40b6c9b78_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:fa17d0211da4cd731549babb12d8abb254fa6d1a64e9631eb0b66ec2299b0731_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:5c69423ad24ae75df2415c0ff710ff98b50f49a5901e23f8a64e948fe06ce8d3_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:9d4202afaf51dd4f85a50774fe911d812ff1b0c8993df9aef8aede59a2430cb9_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:b6e4cfd2cb4d6155f3f1ffb28948fdf5c1481420eabbe71723358cd0a22313af_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:d6c7f9537af5e29a7ff420e21a303478d20c2068ae7868cdcf9aa5f0be595924_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-credential-operator@sha256:0af9b356fb8828a32b4d6777aa808f51b15ddeed7418282a6247dfa6e15be403_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-credential-operator@sha256:204759f4f6c0a1d2b5aab40d8c561b8ac9493708684ec68f9172ee2e9eb2ede0_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-credential-operator@sha256:385af03ffe39b5c1e0edb51247763cd983c71b0b567d9386237edc7253ac67f2_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cloud-credential-operator@sha256:f9961238d1132ba875caadf16558edbadb66830f3fb2f16abcdf8d42479796bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-node-tuning-operator@sha256:46dab3c9741ed94f39eea063f8a7ce4e47c8fb5c0bc154caa7ff282da67034d3_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-node-tuning-operator@sha256:9f4a3d8f1d5f0bb7d680dcae5fdd77135928f646c2471ea25e7e8b59359ce5f2_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-node-tuning-operator@sha256:add614852b0f4e5d4b33bb774c3d33df5c05e8e3ee56e24dda24648305e37a74_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-cluster-node-tuning-operator@sha256:aeeba7478b9c18c0cc13cdbdf6eb5e94e7207ff4dd94bab3195aa22cb0cf095d_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-console@sha256:29c9ffa3c72b6c9554a0219a5e76beed3d4505bf5d085d4b54e5de8fc75e905b_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-console@sha256:574d55942a662d8ec8dfd32f760c9de6edd8803177fc327b7844ac712a44a908_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-console@sha256:aea7068546d1b370a73eb71cdc724ef9f18251aec91249f6d78e6cd1e78305f9_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-console@sha256:f5c16f96b2d51d98f45f5eabd2c27825fc0a49b54db2248195e9e956e8fd5d0c_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-docker-builder@sha256:2bb5397b8cb791e63d5dd7d84d5b6adab3d70fd0c575a21d249aaf86ccfb4c93_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-docker-builder@sha256:606b26c97726458a0df90fc15090a681f65d3f87670162431e3859fb7104c35f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-docker-builder@sha256:77b61f1cfe886523efbc33439ad37b75f67b224f2f2543f0eb1624890d6914cb_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-docker-builder@sha256:a272caa43d4c28de5a0f51eacb7319cfba2161e1e5b65f90bf9d09427fd66e44_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-haproxy-router@sha256:470f6d52d7082bcc92cefafdd83281969e7ade7488672cf3d9cbd138ab10c47f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-haproxy-router@sha256:7484f2aca52ca3bbf00b7c5d93eac80d0bf9928782ed45bfbe174d5883809538_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-haproxy-router@sha256:d91b65b5e1e8ab267273aa91d1489c63ca392f32f9571ceeea4701f00774dd4d_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-haproxy-router@sha256:fe4b73782c89688e28a6646eb28960e19530ef6487aafb0d5d5f832a6b9b5ae7_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-image-customization-controller-rhel8@sha256:65a885db2c53d40ae811b323c040cbb8a2a530ad33022bc78f8de066ceb6790c_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • +43 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:e5eb60f6b35acafb3fcc9648d5a812f41df4645d4f345322ecf709a450004cef (For s390x architecture) The image digest is sha256:0a118768fe192c70e62278457c7f9d5e9e93f4b0ac131058ff52a916e80301e0 (For ppc64le architecture) The image digest is sha256:38ddabb4097428af30338bb380a4845a1d69d720a01745595d543762227572c2 (For aarch64 architecture) The image digest is sha256:d2b1c47c127ece382c81c2c000e5ad356657af3894d610b193a4051ba259bf92 All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (12)