RHSA-2023:4982MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.12.6 Images

Published
September 5, 2023
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products44

  • CNV 4.12 for RHEL 8
  • container-native-virtualization/bridge-marker@sha256:25c7cbd6fe67167346971091713bee01e5c6132ca73efbba4d18010ae3f3f0f7_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cluster-network-addons-operator@sha256:7f033ff2f978b44a97cff3bc69a16037e86cb30068284d06da1df4f6d8021fc8_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cnv-containernetworking-plugins@sha256:5fb6808436ee8e5344e6fe69c3971390e6fddb706b88a1931fae3e79d8e587c2_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cnv-must-gather-rhel8@sha256:1b103de3de00ff42d55afc4fda63d1ba91f6692d9f24f2387b7980d370228a18_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hco-bundle-registry@sha256:d09f210fa79a5aa20fe647ec7fd84a95cf5db41568127fbb035b56deaef3d076_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-csi-driver@sha256:5b60371397b4bc2249827edf2347af63a91f02290f01b593402449b58abb0ccc_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:3802ccc408bd665ef8f61fe2d22243183f34c17489cbe341ce2e1586910d2d65_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-provisioner-rhel8@sha256:646bce8173700cee8477c71db53d57f0fb77a6aa047cfa067404d1948e9349fd_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hyperconverged-cluster-operator@sha256:9957b784f555bc96fc76578898b1e0b1838cec21e4b576ac88ebccf1c80d7c70_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:1b15b04d23d21cb0bab0d42a9cf533e5ad8935ab4675826010def20f3900bfdb_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubemacpool@sha256:39abf5173fcb424e6ec2d6f83e96819335bbcd66bbe312a6371c6c20e6c0a9e1_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-console-plugin@sha256:bca13435bed34805b259923e9d1383ec27f43aa502ef5b451e0c160f5499b0e8_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-ssp-operator@sha256:eec30179d77a9c16a19ec8812b54901355a2445ed2de7743d8dbfc2f1d7eb821_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:b095aa53ca8b962f20c608640c71cd21e61a96e70eafe23ce0e0fd4f45f924f7_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:858e40173297880782f0cf81ea23e9817427e56e588843dcf838dcdc3920919c_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:9b5520536a30c03b52f99a04885701b6b3dc30dff490bf1da90d580537bf77f1_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:90fc9ee44872a5ac59892d3fc0807749b6aac6a8e24b4747e72160f1460066ed_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:55114efebb26d6b281ef7eed2380e6b37eb6707e0a8a1cc124a07c5d090b33db_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:7e0f4f2367470e0881b73a878249f70d89e85b2b452291a3a4d5a9ba5cb55082_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:b816c766aeb69c83891c9048ce1448baf9036233170f2bb4d96180eafe15aad0_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:dab6b2482a38c2416e24b418583c776a5b63858ba8ac04911cf26baa044c9763_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:ec75b102e1a4ac325cc880041c6a6093fe54b773fae376d05e2bc51d15e82e1e_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-template-validator@sha256:c8374e012f7aa6c00e358bdc33d4727d1f5933201f8906d33c412f01aa74955b_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/libguestfs-tools@sha256:43af763452019eaafec050433bc0aa8f91eeef521b4d11ca3f73321d664c2d69_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/ovs-cni-marker@sha256:d5bc051d4613ae819a08811efd7f1d37a908538c6194b26746ad11b5132f9d90_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/ovs-cni-plugin@sha256:ea925f62ff4933eab755810fff4d3aad9786b60676a9d58444845c6f5fb252e6_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-api@sha256:3a23f80574c79d9ef79a821155dcd6ac829c3759b06805f20c80fd0b52520885_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-artifacts-server@sha256:0c4cea46edd8b6725ed5ac945e825a3a62f5e60b26ac623896e0ee946f2372f9_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-cdi-apiserver@sha256:7a53dedd755db1d3e00375fd81078745a10487da40c86a98efd3edb4f1a7478c_amd64 as a component of CNV 4.12 for RHEL 8
  • +14 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (10)