RHSA-2023:4287MediumCVSS 6.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.12.5 security and bug fix update

Published
July 26, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-3089 →

📋 Description

CVE-2023-3089 — openshift: OCP & FIPS mode

🎯 Affected products70

  • RHODF 4.12 for RHEL 8
  • odf4/cephcsi-rhel8@sha256:0e9665305bb269c1c0477f7b1937e5e7450f83244a652ff5e5cfe6dd3ca2e23d_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/cephcsi-rhel8@sha256:62a40dd80a9128b47fe4f29295a67a1b83c3956fc9836e1b93d0dfe3c955d910_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/cephcsi-rhel8@sha256:77ee77ad74a3eff227bff0a3692830c03940a7250c19fa2348e1ef840c7af30b_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-core-rhel8@sha256:4413daedf7091b63f3a89ee4432837b45babbe58a77c463537ded2ea6a9467ce_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-core-rhel8@sha256:520a18f8943341fdaf36ab044d263934eb533278263a54ed68665a5628f8bb14_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-core-rhel8@sha256:e60ddab293fee3da7546828da66454d380e1700848eb03df389f9f8596ff1d9c_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-operator-bundle@sha256:50db58771e5b8fafb5b0892d0322bc0d48ae24ea85719c7ff52f5246befb03bc_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-operator-bundle@sha256:5f0d2305e07bf0a7d5f75fef18b31ff60e614a86381c84b6280c1c9c43119086_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-operator-bundle@sha256:ff1360c996eb7309ff029f630baa8178242a148c49ebe3cb4d56d9a78b1f1a9e_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-rhel8-operator@sha256:6032ab00ea6e4a56187cab1b4be920a88f82f70264239e555180f5440c6d3975_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-rhel8-operator@sha256:7286f02997374bb7bbddb2b419bf84d4997010a68400197ae040a76114601e66_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/mcg-rhel8-operator@sha256:c567fb57805dd567f07ea715c9ea1d02f889a1605d4796868427d6172aab5d6e_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-operator-bundle@sha256:2d84da5f868634b1b821f835ede095a125c383b7dcce64eaa4f2df377abba659_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-operator-bundle@sha256:605f96551ce408a8f5a8a622cbf289e2b970d638e14c69c6a258eee24943faa0_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-operator-bundle@sha256:64e7dd5e6bf081c9f2b5e420ada0cdffbe93dc5ac5fa605506a604abbc800be6_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-rhel8-operator@sha256:6b51038416f463d7a960f813ae96ae4045f8c3725f2030de8357f1b56efc82d0_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-rhel8-operator@sha256:903d904a07760ac3e54cdfc97a7f638e0554b64a0e0bb3abd04a6345585ed60f_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-client-rhel8-operator@sha256:aa0c199ff0e602a852886b5429f1c8ccd14d82586e58b31ac2463bf917bfcb43_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-metrics-exporter-rhel8@sha256:077701042c10985ad3cc178abcdf066ded13007f3580cb735e76a3c307dc3624_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-metrics-exporter-rhel8@sha256:8e44e9f85346c28ba5272fb79c38cee6d721170e71a0d73aff799db0e9a5c4b0_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-metrics-exporter-rhel8@sha256:e736261857d225e5e370b932f4028d8bc4b494cfc3400577890f796b83bc18f3_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-must-gather-rhel8@sha256:89c7dd0671714a697f2672734eaec29e3b3271d5d4f3a281ec553d0ffd690ceb_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-must-gather-rhel8@sha256:b66d0a01dc8deabdd7863066a2c56b69d6e66e9da0ce1725b5a29075b8a83d89_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-must-gather-rhel8@sha256:cde2dd5654090eb265d2e3e38c4a5a1a1f45efa56150fd2c5bb1a2680ec6e07d_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-operator-bundle@sha256:2958d91d83828595e729b0581b6db7a8c0e84e0b631061c3b6ebe1d7fd597202_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-operator-bundle@sha256:a1ff9195f43b64078346c56086daf33af532af4c2495b2a28cded6aeb6186b64_ppc64le as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-operator-bundle@sha256:e3c020b667022dc56e9bed23497c450544e50a69561abb56ae34503bc5f519e7_amd64 as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-rhel8-operator@sha256:4d2afb4cded09378a16c170c8c15593d8e375bc34993e56744156fc0877a9c01_s390x as a component of RHODF 4.12 for RHEL 8
  • odf4/ocs-rhel8-operator@sha256:5f2e22224ebef56cb06ffb38982098ab7b5dc633014c2bb05626cdb47d9b7c33_amd64 as a component of RHODF 4.12 for RHEL 8
  • +40 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

🔗 References (11)