RHSA-2023:3615MediumCVSS 5.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.22 bug fix and security update

Published
June 24, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2021-4235 →

📋 Description

CVE-2021-4235 — go-yaml: Denial of Service in go-yaml

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:8e6ffb128ace6c6a1cc75463bf1598871bc7df923909072b97dbd0356055e751_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:954186d49f71053d9a01ed33cb48f8559d591f753acc174712299daada380e0b_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:b560465cf1162872daef774045ee230f0a96459bc2a8a4b57fb1d9b12c278e8e_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:fada2579481c6abb745b9207240ef8a9236f3d29be95b17a24d15946ccd7c33a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:2a6037a4c99779116fb1f296e4d7226b671336f95bb84f995145cc855db8eac5_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:39701bf01bb26b2051d4a239e4d8ee9242a9e92700786ca850bad76b8302bd2c_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:76662154f549f1edde1b61aeebee11b5e23ea3c4809551532c2edcd6ad1993db_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:7b94ee22f54e0c2df97b942d0d20ea8dd5a449cce4d7c17b6e38d1c7cc3e6e8e_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:2aad49d048343941eb17157ea7a0061c3153e907613041c5f839ada3e9b0cb70_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:9a7a6d77b522f69c65a0c164575661f2a31c2f40871eb9a980af444fc97cc41e_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:9cc6b5a63edac163fad20e8d0a1eaedbaea9355c76286caa46dfc539f7707562_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:ab3ae9b360ac81a8c946adc438d674a6d186fbebc6abf51b72c8703946db0f09_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:4fa31ad51bd391fa930b4c6433bb5b64ff23a1b0a61535883338e8f4535c887f_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:6399bebc1b79c5bddc268e635f98d064b333b8628f1c493315f7942971572f26_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:79ef60740b5ae1baebf4b672cc0fe41dd40b0bd1195a90a1e937705439f9f1ef_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:da30493d7097c4cf6515f0a0973469fb1082c53fa20c15eb4a01ae35026c1617_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:455a46560a5d60582f0fbcb8ebc22061717bf28dd1f7f5ad8a32e80f319da22d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:77bfe9969374e2768c7dd3728e5857e56f6ad7e51f81fa2f38f1f5ea65277955_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:a28c01cafc498943b55864b5e9477ce8bb6c2d6bc90b87ce5dcd0e08b2d703eb_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:b5229ef17e8a031cfb6c559928d641a35813599fc45df6f040b1c955297a1c55_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:14cf4892fa9aaff6de6c05033c9269961df96584682ec9d34d2e99a3acd7f432_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:186857f68b76fda5d5cc7558d77609685a94a123a6c68b346a4150f8380323c6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:a8bb7c686c6db808fb6b8b3786ecf54a53a5b72696d173556a8bdcafa1f1755a_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:aa28e3edd85039266d6e921a78016078275db684d3ec85c942d6ff81226577e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:d7603265e062b08fed85fc31a0ae5df7dc14a08eb07716479eb2190776d1b9fb_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:1228bb8b559dd5d478bcf18c34e0abf0ce4388f7d7c6d6bdb6a3bf422607a51e_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:834e80b17a4d1d7aa77dff9d8b82f369752f01e95a785b40e7c40c4ebc4873f6_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:92220ada154f03e41037893bcb49041063f1fecf88143bb8fb8cf6174a7f7b79_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:caa8640affc470e95307c7912bc7422a682dfdd77ca14c61f284e5f168f7e87c_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:ba7956f5c2aae61c8ff3ab1ab2ee7e625db9b1c8964a65339764db79c148e4e6 (For s390x architecture) The image digest is sha256:36d8c9581c255ea3fb48ee8e3b4acb2e4b408f1c3542b16c55c0637403ef29e7 (For ppc64le architecture) The image digest is sha256:1a3f611d665c1d2b2ddb54d4f54e64c181e59fb57ec97c0578cad42c436a9bbc (For aarch64 architecture) The image digest is sha256:36fe7b5c69297210f8bc0303a58c019fdc4ca578d0c3340b1bc847c47e87d333 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html.

🔗 References (14)