RHSA-2021:4848: Moderate: Migration Toolkit for Containers (MTC) 1.5.2 security update and bugfix advisory

Published Nov 29, 2021

Updated

The Migration Toolkit for Containers (MTC) enables you to migrateKubernetes resources, persistent volume data, and internal container imagesbetween OpenShift Container Platform clusters, using the MTC web console orthe Kubernetes API.Security Fix(es): nodejs-immer: prototype pollution may lead to DoS or remote code execution (CVE-2021-3757) mig-controller: incorrect namespaces handling may lead to not authorized usage of Migration Toolkit for Containers (MTC) (CVE-2021-3948) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.

Affected Software

1 affected component

Red Hat Migration Toolkit for Containers

Remediation

Event History

Feb 24, 2026

Advisory Published

via Red Hat·09:23 PM

Data Sourced

via Red Hat·09:23 PM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2021:4848?

The severity of RHSA-2021:4848 is classified as important.

How do I fix RHSA-2021:4848?

To fix RHSA-2021:4848, you should update the Migration Toolkit for Containers to the latest available version.

What components are affected by RHSA-2021:4848?

RHSA-2021:4848 affects the Red Hat Migration Toolkit for Containers.

Is there a workaround for RHSA-2021:4848?

There are no known workarounds for RHSA-2021:4848; applying the update is recommended.

What is the impact of not addressing RHSA-2021:4848?

Not addressing RHSA-2021:4848 could lead to security vulnerabilities that may be exploited by attackers.