RHSA-2023:3542MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.43 bug fix and security update

Published
June 14, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:3837a562a318c52b9068a84445cf65e7271862ef5f2c93ab109e575131149c42_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:756cf5a90ca84d24557cb0ff0459929917d1ddb6f4212c69231af470a41cd435_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:c37ce518b678d682b374988728bf07791c34fa4c57e9896c6bd02dab74368bf0_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:cd82d15b4d41d3b5a81adcd1b2a27a29bc90dd5a74a61d449e130b713a724066_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:0488afe82572650ca5f84ea3168068643aa7c4643216b5b5838b027280a62329_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:0c307a537750944d7d9f53d1ddf3ed5e1c2ee100851e0363ea21d7889fdc64ee_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:4423e323b35be101124089b8c2fd0cf86cecaa676d030827bcabd307e9cb6b8d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:eb1826add6b8b426d907a598d9219a806ac994c96c01729aa2cb55aa5b6b4512_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:76450f0115ac9cb3d5e0f2954c63c8d7cf62331eebbb3723a8f5a13c949ee332_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:8508f64a8a6ea8d93531264e0611fc23e56e8491ce15bc92161775025066216d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:a2677ce1895db546ca9fc420c9e890e7ce3f609c7efb85de4e7b1472fc224864_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:c7ef0f0cc613d87270618b774b33087d30798c753754f934c77fd5ba57135ca9_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:8d5da7c963ef844a171464f52ad4781f8ff5c4e723aa8229a0de90626bdbdfd7_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:a29eabbb3abc1916d7a99feafa7315341d9a6e89967408f2e6c407a847de40b4_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:fcc6fa50cd2aa1c8ce5f8a05bba0c3928f64eb0b4d50c89a99b979ec11b3f169_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:fe7b77a77cf6323336e09c28231fcce00d68cf6b7cf02c4dd14e289ae043ef11_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:00c419920afab707bade3bee07625a6f977a8dac05053d52db88fb146bdf3348_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:4cc3e3d9a3ceb6f275c5db6988e1fed10cd03c16d014b3071b48e83cfa511e14_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:52ba31baa37a3b69520742c7a87ab7c2d268586e2bcbf75c9d0bc969ee3513ed_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:ce17f19e5a0ddbe6df07c3c6bf70dd75b6f35c17814a70c72e235b7189834d58_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:d003abc1c50bb1218cdacd5321c3af08251e1d9103cbad08514ce05d759a972e_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:333eb03b8d745dc45a4d5d75e90a55aa4c366d3e4f23088f5a062276337c86a6_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:81fcab1ee45955b7a7b71eaad477236b43b6fc5bcca69b291a0fddfb8cafeae0_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:b498013663e20b9fb9bb0b06cce6de3fe0c70ec25a8d97ae3a8586eaa515a26c_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:bc15c7792271fadfb8a85e499df6f084b485ba3061e58d9d457d3788fa355093_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:4f3e3e54316491399d5a1c41f8c56662280f1248bbfb0a76f9fc8c0f2f60c775_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:b0ea3725240c4cef419ccb1a8dbcf20576aec2b646d5d14d0e0a33c5f480d05f_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:d0c35bca101e02be4448b057081456e67aa6d5def409328ca8e34721d1c040dc_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:efd2f7454ce27aa73764d81c5ba56c6f7efa755b432b344e39afdf4bf1644b90_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:d11cd63a623d33bda744f1a886d4b55710db4d68878967be2ebcd5535fafa25d (For s390x architecture) The image digest is sha256:ff0182211e8d73877a69aec8a47c32f8b1e327bd4c9edad51bcffb576f8094dc (For ppc64le architecture) The image digest is sha256:912d94c0fd0a61c85f9f7fea9c815bee35fa0def9c719984a625b9ba1392d403 (For aarch64 architecture) The image digest is sha256:724078d654fb07fc816508b70f548ada9e1241592af19e72757b7ad4d270c045 All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (14)