RHSA-2022:0056: Moderate: OpenShift Container Platform 4.10.3 security update

Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the container images for Red Hat OpenShift ContainerPlatform 4.10.3. See the following advisory for the RPM packages for thisrelease:https://access.redhat.com/errata/RHSA-2022:0055 Space precludes documenting all of the container images in this advisory.See the following Release Notes documentation, which will be updatedshortly for this release, for details about these changes:https://docs.openshift.com/container-platform/4.10/releasenotes/ocp-4-10-release-notes.html Security Fix(es): gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation (CVE-2021-3121) grafana: Snapshot authentication bypass (CVE-2021-39226) golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716) nodejs-axios: Regular expression denial of service in trim function (CVE-2021-3749) golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717) grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673) grafana: directory traversal vulnerability (CVE-2021-43813) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.You may download the oc tool and use it to inspect release image metadataas follows:(For x8664 architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.10.3-x8664The image digest issha256:7ffe4cd612be27e355a640e5eec5cd8f923c1400d969fd590f806cffdaabcc56(For s390x architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.10.3-s390xThe image digest issha256:4cf21a9399da1ce8427246f251ae5dedacfc8c746d2345f9cfe039ed9eda3e69(For ppc64le architecture)$ oc adm release infoquay.io/openshift-release-dev/ocp-release:4.10.3-ppc64leThe image digest issha256:4ee571da1edf59dfee4473aa4604aba63c224bf8e6bcf57d048305babbbde93cAll OpenShift Container Platform 4.10 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift Consoleor the CLI oc command. Instructions for upgrading a cluster are availableathttps://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html