RHSA-2023:1270HighCVSS 7.0

Red Hat Security Advisory: OpenShift Container Platform 4.12.8 security update

Published
March 21, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

🎯 Affected products175

  • Red Hat OpenShift Container Platform 4.12
  • openshift-tech-preview/metallb-rhel8@sha256:3e4d283eaf8c978dc2cc53ba25c068e72b3a31dc1231b393418ef7b893e58ddf_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift-tech-preview/metallb-rhel8@sha256:6c47a5a62cc1889044993d1262467a13735ba1427acf50f3152ebbafc3cfe4f6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift-tech-preview/metallb-rhel8@sha256:8fffbcafafe9582ad814fa0648f1a49e6e5981cfb0f3149282674d6495a6cc32_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift-tech-preview/metallb-rhel8@sha256:f4f2642db28b90099e6609fb294164085c8dc722f271544bb0cade8c6197e3e0_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-event-proxy-rhel8@sha256:08d38e708fb7a9fe0aa9bb3fbfba664ac9f9e3db1c37adaf9ced0bb36e7771ee_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-event-proxy-rhel8@sha256:a44c4b35f660dd5098a9666374e10d9111c7464f20a32c6141f6eb1d45520341_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-event-proxy-rhel8@sha256:df188b4675ebd528caac6dfb451a5002a3a10d38f32837a8560b1558158537ef_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/dpu-network-rhel8-operator@sha256:5c9d5e4c561a43b102d44282bd2a081e998399a1971bc070cebd84f771c359b7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/dpu-network-rhel8-operator@sha256:9642e5be6e9d6bea68f76a95667f54d1e125348a8cf1ca618bac68be2b561de9_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/frr-rhel8@sha256:56a76b2bbfb84856f8964286c2af62c81dd81934bbee6c5c45b07ab4566017b2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/frr-rhel8@sha256:65e4020374849047bf885089998ad67628bb10403306787511ba3d347ab5491a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/frr-rhel8@sha256:7c8e0a32dd89eb3a9bf8f2178fb11dbe39819774bae7a93e410363d072e0fce8_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/frr-rhel8@sha256:f2e219b06a5bb1283cf74312933303ce8804634dfb87a7dcfc0311b18ded3d9d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:410462c08f4d192bec6c99e74ce771d150deed928a1c93b8447ebd2c8d03e688_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:4523f8889f7d7e72fa8fe7cce2f06d4ea95b3e629c55e241bea99d9ec3b4050a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:6ad790a14dfd5a2f6491540f1e8da33e18d679b22224c53e219ba07b2d7c602d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:7b97660243dc108c553965ec86bd0aa1713d525f9e492ec0736465ca1b74304b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall@sha256:4201890be498499a92508cd79756c7b3ffbe4e3d98ebc52703b34dadedcfb951_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall@sha256:492205ffc498d4c763aab16e459b1fbe108f681955a982069f57c0226ca38f9a_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall@sha256:5bd90c0f75ac9906e8d0acb15e76280cff2631385ff8bbe14c974bc68b195bbf_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ingress-node-firewall@sha256:686d93c8da2f49e96d87c7b5726419380b3493880f91430682ff8c27c5005f68_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:1cb09c55162b19fb36536374e335ebcd598e9ac136a542d8d88e1336b33e4f18_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:2afa44b16542ed58dcef558b709ec6be782d7de10d2fe746cc13939b223cfa03_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:360e27ac27f4c377441fa88e35f62be836f39ed32ffb18a0ec3f828152b1db40_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:7997ee92facb054d905da61c2ba092b027e3320fe2e58594d03877024491268c_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:3c3b1e66d08ea0b79bec5d18665f949b8f75bc19dfb291ee25d81fb8694bdc19_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:46550a21e91984ad20946e19170fd57a79b3bd434e473338b5ef657be1e60b7e_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:7c59895a94b6307c8295b55fd8fe3f4a9f64736965d5f031fe8bad43a3b6a507_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/metallb-rhel8-operator@sha256:b9860ed545cb4e770b750201dcb97a96406733a46b6916cfb5f58b913c5eb10b_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +145 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html

🔗 References (6)