RHSA-2021:1005: Moderate: OpenShift Container Platform 4.7.5 security and bug fix update

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the container images for Red Hat OpenShift ContainerPlatform 4.7.5. See the following advisory for the RPM packages forthis release:https://access.redhat.com/errata/RHSA-2021:1006 All OpenShift Container Platform 4.7 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift Consoleor the CLI oc command. Instructions for upgrading a cluster are availableathttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-between-minor.html#understanding-upgrade-channelsupdating-cluster-between-minor Security Fix(es): gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation (CVE-2021-3121) containernetworking-cni: Arbitrary path injection via type field in CNI configuration (CVE-2021-20206) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:This update also fixes several bugs. Documentation for these changes is available from the Release Notes document linked to in the References section.You may download the oc tool and use it to inspect release image metadataas follows:(For x8664 architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.6.20-x8664The image digest issha256:0a4c44daf1666f069258aa983a66afa2f3998b78ced79faa6174e0a0f438f0a5(For s390x architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.6.20-s390xThe image digest issha256:3fc802aafb72402768bbf1b19ce7c6de95256e5cc50799390e63f40d96cec3cd(For ppc64le architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.6.20-ppc64leThe image digest issha256:5cf6b61198337cd0950e63296be4e48e991721ac17c625f7fd77cf557f08efc7