Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Red Hat OpenShift 4.12.4 Moderate Update: Security Fixes and Enhancements

red hat
Calendar Grey February 21, 2023
Dist Redhat Esm H88
A general security patch has been released for OpenShift Container Platform 4.12.4, tackling various vulnerabilities and improvements.
Red Hat OpenShift Container Platform release 4.12.4 is now available with updates to packages and images that fix several bugs and add enhancements

Solution

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes/ocp-4-12-release-notes

You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are:

(For x86_64 architecture) The image digest is sha256:bbf1f27e5942a2f7a0f298606029d10600ba0462a09ab654f006ce14d314cb2c

(For s390x architecture) The image digest is sha256:12e389281c05ba0589197af676dd460f668da162181cb8f3edb8f27101d14c39

(For ppc64le architecture) The image digest is sha256:853c1577bcb33350c0c19a535c14965bdeee4c6a471dd988f08ae241b866c8fc

(For aarch64 architecture) The image digest is sha256:2a7f99c2814704b2bbb1ba4c06ce87c50384f87fb120b71d02a2f6bca8c867c6

All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/updating_clusters/updating-cluster-cli

Summary

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Security Fix(es):
* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat security fix moderate impact package updates OpenShift container platform

References

https://access.redhat.com/security/cve/CVE-2014-3577 https://access.redhat.com/security/cve/CVE-2021-21684 https://access.redhat.com/security/cve/CVE-2021-41190 https://access.redhat.com/security/cve/CVE-2021-41772 https://access.redhat.com/security/cve/CVE-2021-44716 https://access.redhat.com/security/cve/CVE-2021-44717 https://access.redhat.com/security/cve/CVE-2022-0532 https://access.redhat.com/security/cve/CVE-2022-2879 https://access.redhat.com/security/cve/CVE-2022-2880 https://access.redhat.com/security/cve/CVE-2022-4337 https://access.redhat.com/security/cve/CVE-2022-4338 https://access.redhat.com/security/cve/CVE-2022-23521 https://access.redhat.com/security/cve/CVE-2022-41715 https://access.redhat.com/security/cve/CVE-2022-41717 https://access.redhat.com/security/cve/CVE-2022-41903 https://access.redhat.com/security/cve/CVE-2022-47629 https://access.redhat.com/security/updates/classification/#moderate

Package List


Advisory ID: RHSA-2023:0769-01
Product: Red Hat OpenShift Enterprise
Advisory URL: https://access.redhat.com/errata/RHSA-2023:0769
Issue date: 2023-02-20

Topic

Red Hat OpenShift Container Platform release 4.12.4 is now available withupdates to packages and images that fix several bugs and add enhancements.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat security fix moderate impact package updates OpenShift container platform

Relevant Releases Architectures

Bugs Fixed

2091214 - Pods are unable to start due to error "Failed to set quota limit for projid xxxxx on /var/lib/containers/storage/overlay/backingFsBlockDev: no such file or directory

2161274 - CVE-2022-41717 golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests

5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects):

OCPBUGS-4778 - CNO in HyperShift reports upgrade complete in clusteroperator prematurely

OCPBUGS-6260 - Catalog, fatal error: concurrent map read and map write

OCPBUGS-6637 - [4.12] Can't reach own service when egress netpol are enabled

OCPBUGS-6779 - WebScale: configure-ovs.sh fails because it picks the wrong default interface

OCPBUGS-6788 - [vsphere-problem-detector] fully qualified username must be used when checking permissions

OCPBUGS-6807 - Platform baremetal warnings during create image when fields not defined

OCPBUGS-6973 - [IPI] Baremetal ovs-configure.sh script fails to start secondary bridge br-ex1

OCPBUGS-7044 - Nodes unready in PublicAndPrivate / Private Hypershift setups behind a proxy

OCPBUGS-7208 - When setting allowedRegistries urls the openshift-samples operator is degraded

OCPBUGS-7227 - update sdn 4.12 branch build config

OCPBUGS-7230 - [4.12] Index violation on IGMP_Group during upgrade from 4.12.0 to 4.12.1

OCPBUGS-7285 - [4.12] Hypershift failing new SCC conformance tests

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here