Skip to content
OpenAdvisories
Medium RHSA-2021:3758 5 CVEs

Red Hat Security Advisory: OpenShift Container Platform 4.9.0 packages and security update

Published Sep 30, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.9::el7 openshift 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7
Red Hat · OpenShift 4 openshift:4.9::el7 openshift-hyperkube 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7
Red Hat · OpenShift 4 openshift:4.9::el8 coreos-installer 0:0.10.0-2.rhaos4.9.el8
Red Hat · OpenShift 4 openshift:4.9::el8 coreos-installer-bootinfra 0:0.10.0-2.rhaos4.9.el8
Red Hat · OpenShift 4 openshift:4.9::el8 coreos-installer-bootinfra-debuginfo 0:0.10.0-2.rhaos4.9.el8
Red Hat · OpenShift 4 openshift:4.9::el8 coreos-installer-debuginfo 0:0.10.0-2.rhaos4.9.el8
Red Hat · OpenShift 4 openshift:4.9::el8 coreos-installer-debugsource 0:0.10.0-2.rhaos4.9.el8
Red Hat · OpenShift 4 openshift:4.9::el8 jenkins 0:2.289.3.1630554997-1.el8
Red Hat · OpenShift 4 openshift:4.9::el8 network-scripts-openvswitch2.15 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openshift 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8
Red Hat · OpenShift 4 openshift:4.9::el8 openshift-hyperkube 0:4.9.0-202110080828.p0.git.894a78b.assembly.stream.el8
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15-debuginfo 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15-debugsource 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15-devel 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15-ipsec 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 openvswitch2.15-test 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 python3-openvswitch2.15 0:2.15.0-28.el8fdp
Red Hat · OpenShift 4 openshift:4.9::el8 python3-openvswitch2.15-debuginfo 0:2.15.0-28.el8fdp

Vulnerabilities 5

  • Medium 5.5
    CVE-2021-36980

    Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact…

    openvswitch openvswitch openvswitch openvswitch Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2021-3917

    coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

    A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulner…

    coreos-installer crates.io
  • Medium 5.3
    CVE-2021-28169 Scanner template EPSS 78%

    Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can ret…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Low 2.9
    CVE-2021-34428 Public exploit

    SessionListener can prevent a session from being invalidated breaking logout

    For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple con…

    The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  • Unscored —
    CVE-2021-33196

    Panic when reading certain archives in archive/zip

    In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1965503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1971016
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1974891
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1984473
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3758.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3917
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2018478
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3917
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3917
  • article
    https://github.com/coreos/coreos-installer/commit/2a36405339c87b16ed6c76e91ad5b76638fbdb0c
  • report
    https://access.redhat.com/security/cve/CVE-2021-28169
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28169
  • report
    https://access.redhat.com/security/cve/CVE-2021-33196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-33196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-33196
  • article
    https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI
  • report
    https://access.redhat.com/security/cve/CVE-2021-34428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-34428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-34428
  • article
    https://github.com/eclipse/jetty.project/security/advisories/GHSA-m6cp-vxjx-65j6
  • report
    https://access.redhat.com/security/cve/CVE-2021-36980
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-36980
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-36980
  • article
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851