Red Hat Updates
2791Warning Date
Severity Level
Warning Number
Target Sector
19 December, 2021
● Critical
2021-4091
All
Description:
Red Hat has released security updates to address serveral vulnerabilities in the following products:
- OpenShift Container Platform 4.6.z
- Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.6 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.6 for RHEL 8 s390x
- OpenShift Container Platform 4.6.52
- Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.6 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.6 for RHEL 8 s390x
- go-toolset-1.16 and go-toolset-1.16-golang
- Red Hat Developer Tools (for RHEL Workstation) 1 x86_64
- Red Hat Developer Tools (for RHEL Server) 1 x86_64
- Red Hat Developer Tools (for RHEL Server for System Z) 1 s390x
- Red Hat Developer Tools (for RHEL Server for IBM Power LE) 1 ppc64le
- rh-postgresql13-postgresql
- Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
- Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
- Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le
- Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
- OpenShift Container Platform 4.7.40
- Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for Power 4.6 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8 s390x
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.6 for RHEL 8 s390x
- Red Hat 3scale API Management 2.11.1
- Red Hat 3scale API Management Platform 2 for RHEL 8 x86_64
- Red Hat 3scale API Management Platform 2 for RHEL 8 ppc64le
- Red Hat 3scale API Management Platform 2 for RHEL 7 x86_64
- Red Hat 3scale API Management Platform 2 for RHEL 7 ppc64le
- samba
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat Enterprise Linux for IBM z Systems 7 s390x
- Red Hat Enterprise Linux for Power, big endian 7 ppc64
- Red Hat Enterprise Linux for Scientific Computing 7 x86_64
- Red Hat Enterprise Linux Resilient Storage for x86_64 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
- Red Hat Enterprise Linux Resilient Storage for IBM z Systems 7 s390x
- Red Hat Enterprise Linux Resilient Storage for Power, little endian 7 ppc64le
- ipa
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat Enterprise Linux for IBM z Systems 7 s390x
- Red Hat Enterprise Linux for Power, big endian 7 ppc64
- Red Hat Enterprise Linux for Scientific Computing 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
- OpenShift Container Platform 4.8.24
- Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x
- OpenShift Container Platform 4.6.52
- Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.6 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.6 for RHEL 8 s390x
- OpenShift Container Platform 4.7.40
- Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8 s390x
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code - Remotely
- Denial of service attack (DoS)
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:
- https://access.redhat.com/errata/RHSA-2021:5106
- https://access.redhat.com/errata/RHSA-2021:5141
- https://access.redhat.com/errata/RHSA-2021:5176
- https://access.redhat.com/errata/RHSA-2021:5179
- https://access.redhat.com/errata/RHSA-2021:5107
- https://access.redhat.com/errata/RHSA-2021:5191
- https://access.redhat.com/errata/RHSA-2021:5192
- https://access.redhat.com/errata/RHSA-2021:5195
- https://access.redhat.com/errata/RHSA-2021:5197
- https://access.redhat.com/errata/RHSA-2021:5183
- https://access.redhat.com/errata/RHSA-2021:5186
- https://access.redhat.com/errata/RHSA-2021:5184