RHSA-2026:60449: Important: OpenShift Container Platform 4.21.31 packages and security update
Important: OpenShift Container Platform 4.21.31 packages and security update
Other sources
Red Hat OpenShift Container Platform is Red Hat's cloud computingKubernetes application platform solution designed for on-premise or privatecloud deployments.This advisory contains the RPM packages for Red Hat OpenShift ContainerPlatform 4.21.31. See the following advisory for the container images forthis release:https://access.redhat.com/errata/RHSA-2026:60477 Security Fix(es): github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env (CVE-2026-15809) github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object(CVE-2026-34986)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.All OpenShift Container Platform 4.21 users are advised to upgrade to theseupdated packages and images when they are available in the appropriaterelease channel. To check for available updates, use the OpenShift CLI (oc)or web console. Instructions for upgrading a cluster are available athttps://docs.redhat.com/en/documentation/openshiftcontainerplatform/4.21/html-single/updatingclusters/index#updating-cluster-cli.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/cri-oto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9 - Upgrade
Upgrade
redhat/cri-o-debuginfoto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9 - Upgrade
Upgrade
redhat/cri-o-debugsourceto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9 - Upgrade
Upgrade
redhat/cri-oto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9.aa - Upgrade
Upgrade
redhat/cri-o-debuginfoto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9.aa - Upgrade
Upgrade
redhat/cri-o-debugsourceto a version that resolves this vulnerability.Fixed in 1.34.11-4.rhaos4.21.git358c4b4.el9.aa - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.21.31Patch RHSA-2026:60477
Event History
Frequently Asked Questions
Which OpenShift deployments are covered by this update?
The advisory applies to OpenShift Container Platform 4.21 and lists standard OpenShift Container Platform deployments as well as Power, ARM 64, and IBM Z and LinuxONE variants.
What should be updated to remediate the issues?
Upgrade to the OpenShift Container Platform 4.21.31 updated packages and the corresponding container images. The advisory identifies RHSA-2026:60477 as the container-image advisory for this release.
How can an operator check whether the update is available?
Check available updates using the OpenShift CLI (oc) or the web console.