RHSA-2023:4310MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.46 security update

Published
August 2, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:94bf1beb9100999846f146041c4b4a4a04380c73c8302df36309be5f4aec9440_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:95b630d92dce6eb2043969074c37df9f1737e3caa94bfd24a2a98b924ecbc932_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:a61f6ec82f0b7d2d75e2829cb5fa2ab39828bb5ca73ef9c4817d05e0ccaae1a8_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:b8f28a95201a93463815df23827f6b4472dbf91da1a6d1a7072c08aabaa6d03a_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:79b02e3e6a03c547219ac12bcb8c306d67c708395fa36d45a7ea2c10dfbcca18_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:7c8143eb282a63439441dc173040c620c06fa287baf37ad564cde21d8a68b1fc_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:9985ed54932af0d806e30fdd27633238a77dadfcaa4c64167bb1c48320cdb6e3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:d820aa0499ae320d9f20e8da39f862219884e7666daebaef7c16d09510be5655_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:044ada3d1cc99a57bb6a535fd521d36b56cfeead058eaf8c2bfe03c06f1917de_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:077691b3f7f4f907a7667cdfc32d0655daa8ac8dc551d63148dc8166c93bebc3_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:5f1071cf66ec62565ead427b53dd605baeafd82f8db17f7960b281ee4eb85fef_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:a067c2602004854213fb6fc38843a748c8f34c137c5c5bebc512cf9188857798_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:0a81e6a52f180ddb8fa6d01139e228763c8aacc7ff5d6973aade270dbde43366_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:7bb1e092c07d49777a23a552d0d2cec99dc15b5e14ff768ede5d27293ff6c36d_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:80401c95a94745d1c466e1eaeabcc89297b06546ea80ddeface85493018b855d_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:f2469ec386afb95ad49cdb2751f998ab853b8f1df9533f56a4b5c3ab31bf7fa0_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:61d14fdbaf6df0cc630fe012e096cfc6e9c9326f2ae5df1a999a75f93c9bd7cb_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:104e679860f7afe28364cad1c1e9cfc466c719279eae4a8e1ca66aceb398810b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:499927d39ad272de334494336dfec632f895d29f05a4af2fdc666cfd3b326df2_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:6fcb3eed3b5bd57549ca88c4261427cd6a5561a64178bb4bceb1da9bf08c2d7c_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:a7f61d3dd07b54059dbfe537b14d836990fc9e2e83346b47a4ed61e6e5a3abf2_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:3356322b0bb680310dd19448fe755c5cfad8e1f9b3381e0ce48edf29d9baa28b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:3db6d4edf25811250e712e9d8bd29a650d4f120f6490d6c55c32e5803b1073a8_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:a1dffcd033ed86c8d46b33ed8be4f8db396037c2f432912f01bf5e0f774590b8_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:cfd9086436b40aea11df0daf3772c58f7900dfd8cd712848ed66414c39d0a1b8_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:0249ef4f06bb237d3e5e7d75f1afcf302a636935e92173b74aabc12feff5a27d_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:1ce26b1ee064d57560b579377b7c6f86d655bbd6129cbc8871d3990dd21af52e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:239f16ed26446a60b7f19bf9a280b2df76dda7e35590721e611374cd1b907aa1_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:d1f86ba93788e3d96c97b790cba88201b6b146096b3e170ecbb99b78d6f6a235_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:88583eeaddcda4fbfdcf21f4dad86b01ff09bb010357c51f08fb24eb07fdb602 (For s390x architecture) The image digest is sha256:9626db69fc59699669497c95e67d8d3ae66d2374d9949ca7031bb25fa9ac188c (For ppc64le architecture) The image digest is sha256:10b9e45b7bd97eca6f4ae7b0ed3deac843d6c1474152a40206be851363eb56e8 (For aarch64 architecture) The image digest is sha256:37433b71c073c6cbfc8173ec7ab2d99032c8e6d6fe29de06e062d85e33e34531 All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (11)