RHSA-2023:5001MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.49 bug fix and security update

Published
September 13, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-46146 →

📋 Description

CVE-2022-46146 — exporter-toolkit: authentication bypass via cache poisoning

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:0cfe254d712cba4abdd11db45cb6fea7ba37bc88357d29995e5cb607043c1e15_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:26faa3b85bc51f90d3d8490163975684659a18b91222a7b40c137790ba7e4b67_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:5702e24467b6be79cbe9da75eb48080f7c4970655d3e36dab55470302f0527d9_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:a6106f5da19e81ec2ba5f8c340c80c96896f5c7ec2d81fa71dbc57f0b13c7134_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:292203489bd1163409f6dbaac0bb326ac371285c648b21c5a806a80d57582f42_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:3a4b31707142146f3bcb27d5ea3210b7f84ee3c89fb1d8cef1068b3289584098_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:870c731a0b777da3fbe289e4e70b4c81bcd838bc169d5bc3db56d9a3926bb949_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:cb597a43efbc5615193856d0e21d520ec680a6397c9e0bafbd88580dd3fa9952_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:27792f80441c7e684c1e32379a169646e7b6f7cab5e40abeeb49f44335547127_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:72a1fac588eaa33ca607179678e0bb91a9c09c0c96b8f3df6edd94e174a00c55_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:b613d388e7f6dd1a78b2342364fc211a9b960728b987c65e9b38d44277480317_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:f4cd8d8c0a29375fe7e09d77b855090972c531525357846f656e363a94f58830_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:0f32d8a66500ae2e515ff7d90669572f71a2857eeee38e399eecd829ef21dd72_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:20002549968ed309eb496e99c00ad03e2f0c7eb576057a92693c705aeb06d4e1_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:39a7dff7fbde248bb760235ccbc240927d76ab0177f5146579061bb345d8acb6_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:59977467405e4f2fcff14e8b6b7fe789ad317e3ea6a6ace8b2f2cb94ca33fb78_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:79753a1560654525c839848b4f94a4e1b977e9a5b3d189d662446eebdf6e4b81_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:2881c5e71e3e0b92d5be55ced5a1d8bd1d1d07927c56453edb04e4be229d2cdc_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:7abc034d14d103f8e6e240ab6714762bbec2dc32da78a2c1ce653b737915f852_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:d4c56c86344e6f5f6221157c8fc48b3652a3570ebfadc163ea95aabe03e4b32c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:e0157a63166c78624c32ca95d2054e01e5d9bf90d366e9c1398cd389c7d17386_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:57b8e150022b8bef5fe28bf0b97dca35576370ab2a812f292c639a8ea6d9f89e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:8f852b4f2db7c8ddd65c1e480131af2d7fb406269bbc9383572c8995df60174a_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:a236ed389818eac6b5c9e77186dca74bfed000cf33b13078c3cc1cfd3bae0902_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:e831615243036e4b5c82af1878d269f2b05d5abd742ae279acbabf63a7c29eb0_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:42b621f106699012e8f01768f59aeb309a20dc3e91ddae7a113ff7591dbb9ab3_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:5d91ff4aa40c2e757304af0fb01be179bdd8b7a6bb32ee1b888adaf8fc4ef49e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:974076ef95f6261dc443c889e91d3f207f933c61203fa125f2525d7f53e2bf65_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:bf3105d138c743c81ff88483df75b93abde731170d89a1789a40415145647940_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:c0b6536214019f240004c1738e41c6f10f14599393eabada95eb32b2b79eee77 (For s390x architecture) The image digest is sha256:f83982322bf8b4ccdfbf9d35fb2ea8d8d1bc84ca53bf1fbab7a3f0bea89f76c2 (For ppc64le architecture) The image digest is sha256:644b1dca15839a387f014d9734404575fe453ca09c15f43e71e65fd99fa7c92a (For aarch64 architecture) The image digest is sha256:74a56ec7cc0d4054fda3548008f97fdb629eab39dec7d53bd21bec4752a8a9ae All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (14)