RHSA-2023:4053HighCVSS 9.8

Red Hat Security Advisory: OpenShift Container Platform 4.11.45 bug fix and security update

Published
July 19, 2023
Last Modified
August 24, 2026

🔗 CVE IDs covered (1)

CVE-2022-21235 →

📋 Description

CVE-2022-21235 — github.com/Masterminds/vcs: Command Injection via argument injection

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:341e8cafa6610ea5ec316c361ba4485faf0190f29aa4838e801888cf1c881d54_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:4d3deba0f91bdecb239d6977a784b71630fff0a56b52b03bca702582e0eebed5_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:a525c0b96f4516ebcce3290feea00fde07dfe0b4727b803929d3037fa74a7387_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:ace1065b3a0a58a624e9e7713d0cf26ced2062594cb0050fc316dc25595b720d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:26427f8055774ff36a48420228fbe906d2cd07d02afe1137a5a3e956cf9c935b_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:391298238cb5d56dacee137d10aed0b0f6a05adc0b26647b53f30ba411973041_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:9611146a7e18a19f3a7f3e97280f142a23ee00a8a3410c03a0c56b26e0564e47_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:f2e497b8178b3c5240e69c3ecb35f4ac7583327eba15011a16a80c3350350728_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:308bbc53a87df5470164d71b9ea7b6842ec97094e3b9cf3c2ba725443dae5f3a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:6d68e9807bdb0b542735355ec5ef01932ba2cebf0ed92db7e590034917f2f3d4_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:99b1b0c2334c002aac8445be0f45ae72d643a694c1f2a2629fdf720a7a9e6315_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:c06136ac7329887bb8134f19fa866021f544e6e9b41391579c0a45a5474c39ad_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:07122522208000dd1697ca9b49440f9878567337a91d7a894758c9ab0ea6915a_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:32b11c9010902a73190d12cfe05f331f65346783cf8372a9136a22ffcbba753d_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:6844f2b94016f3936422981c8020526969cda3ea05ea8f78d3ade215da4044ae_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:f94060460bfd5189d3778beae5dced535bdea323f91c4405f3b479fab6cf372a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:b6f2044fbb64dbb61457a254b647e39d9e6f1660ca0f5e3d24cbcabb7089c1d7_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:23c67fc0d5a4b4de52758e9e819bd2837685fc029d7e20fed5b1ff16fcdc1f66_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:4415f405ace526013287ce930ea89faa87544708523de5629ae188e42420244f_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:7712dd6b242a4b1b0bb3d6e50e1b93d68fc9d71f37ed933d9f8c0a7799f0fb23_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:ab7986c0a723df4d7d82d9d7b425c6feff302123a681305a4fa58a704a5fc144_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:40dd222f13ea100e64d2dc908094316887dedc669deebb2fd4e6fd135590429a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:48c5651b01a20a12f0d1f5b1d71148e130eb739669029997cb093d9f4ffa75dd_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4a0468a522e9a37ef559b44f2ada634ddefb781f8e32e916adbcfaba7b6c15ed_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:4eacedc092a0d3f5c3c4fd803ed24163c98dff14684052fa80809c623822528a_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:467f803a3739e6386e5a8095faf93fbd1fc7d092dfb19d0f87f6d00d12ab18ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:aca2f58e1359223661a942e2fbf228bbe3523c8be5f4b12f1bd9df3e40b483c6_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:c0922f7524ccc3cfdb21ca4e36dd64ca1dfa61169baf91012ede73e8ada07ee4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:e304f6c97b60f843670560d14b4199b6f9438d32e1f9b1a0b171bcf56526be65_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:c6771b12bd873c0e3e5fbc7afa600d92079de6534dcb52f09cb1d22ee49608a9 (For s390x architecture) The image digest is sha256:622b5361f95d1d512ea84f363ac06155cbb9ee28e85ccaae1acd80b98b660fa8 (For ppc64le architecture) The image digest is sha256:50c131cf85dfb00f258af350a46b85eff8fb8084d3e1617520cd69b59caeaff7 (For aarch64 architecture) The image digest is sha256:9e575c4ece9caaf31acbef246ccad71959cd5bf634e7cb284b0849ddfa205ad7 All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (12)