RHSA-2023:0570MediumCVSS 5.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.2 security update

Published
February 7, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

CVE-2021-4235 →

📋 Description

CVE-2021-4235 — go-yaml: Denial of Service in go-yaml

🎯 Affected products33

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:07067739ca602d8c022856b8e8626bd8d82fa798e9bfc49473bbef18dcd0a4b6_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:149e387685d4f40bba9f92fc1781a261811966532bee1624ea4a38a36f1a76b5_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:28d7413f3cd8d8260ea6e5c0b1871d28a55e29ebac99878c9cb89bdbced56231_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:4a2fc00d3e9465563d969f90fddb522110d580317203ab0d10194fc4e02f173f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:1851ab499ccb34f324f19e0c1fcae8920a8806ef09757b7c7ad228909a7729a3_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:1d27073493ffab3bc39f49f10f64aec5bdc5f6616c109a61269419fd6e4ca8dd_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:996ea3206ffcef3f8e563cda0a4bb43a4e67c3bcf677d70d2324b74b6fb7a3fd_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:c2e76d5117ec8735203b37bb70a4c701486ce7b903b6de79b43a380cf69d1d75_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:6fc0b4c0b21c344d2d3f8795472ca83a6532f386ebbcdc166e1edc644b107d46_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:ae5c13d6518cf8d4ddd590e5bd3c4e94e5c08660ac6931fd0736577b652de67a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:bd910ece9b40b8dc9c786d8c7e0e267d0aaef631c36188592abd5e14f2b8a9ed_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:cc70800353d3b531d33d2bd8da36905a3dc489151b30413f3c338f1d7db51150_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:1de60780be14b5c7dc623b946da2e37c6bd3375514275de48facc33eea2d02ac_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:8a287fcb9ab7c7a45398054921b31e832772a6864383bb6d7d88cb04d9d7750c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:9a8fe9b708e534cc0eb1fd1598f7c639d1ed81086aef62d3c2e0d16226321991_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:9b5da7100bd9c65dc4aa55cafd4690bc17997d98c62530c33ed490e66ee75c1a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-mustgather-rhel8@sha256:347a59235df8c717bf18b8738155cdb830a8aa28dbb51b728180ce618a687c15_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-mustgather-rhel8@sha256:8d297726e537a02346e949c198a4e745ca556ba88b94ee94003da92e3e9af992_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-mustgather-rhel8@sha256:c99ad72919419d27f7238bdd44ab3f09c3f34c43f43176db6671d314d9b3f9ba_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-local-storage-mustgather-rhel8@sha256:f364b5a8ee56e0a807d095ab10f4adb40d904a8ccdaf77981828021a37856765_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:15c935325ef652ce5a9a5a3370d4a4b38525038d2c67af48c0a9af7bd7d781e3_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:290c1e6cf50c45f9a211319137feaff10827e676660381c0ddc572fee5e61854_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:a1879955314f51cf628a9c87ff763cae1502e5ef64c3de9bf6c80c811ab9c44c_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:f1a6915521032c97cec37a4f7faebc53519f6acd5198804a3f2484879e3bcbc4_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-operator-sdk-rhel8@sha256:0dc985bfd60b4239d9f499605d6dcee12632f2f8635ede979d722b7f78b42db6_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-operator-sdk-rhel8@sha256:1a0984339e315355c08d1361f59fabded166c35dc58d1b7d77dba9053f09e5b1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-operator-sdk-rhel8@sha256:3080d6195d66b8d770fedb2074c92671198cb63b2b87a944a67c3d2e2cf0eb28_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-operator-sdk-rhel8@sha256:c78af94a2222275bee746a281accf22a809aff614d6f78882f3876cc7d9d3f0b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-service-idler-rhel8@sha256:30aca1c4ae3866b7eab74f02d584a0330a1016eaee48a0516ab3a45dbc0f01d1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +3 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-[y]-release-notes.html

🔗 References (5)