RHSA-2024:1265MediumCVSS 4.3

Red Hat Security Advisory: OpenShift Container Platform 4.12.53 bug fix and security update

Published
March 20, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-25165 →

📋 Description

CVE-2023-25165 — helm: getHostByName Function Information Disclosure

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:45bee9e3be0d37d1a505dbf6c68e916c2611227cc18ab42617f90869b517c656_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:592eb773556da1b1df28af8757b48f7a48dfc050d2e635ff10de3b5d4ee5cfdb_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:ab65337e617eb12e3c6eb4b88134b319f924b2cc5b3744249667728a8dd9f265_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:f262ef19301455cf08312d9a943a3c5df5c0f43a1da2bfc0c7ef0c6aefa74434_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:16b12396ae76ae97625b847179da8f397956d84839bb7bce3eafba6169a9f85d_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:30ede70b8bbf8cfb43e888a1fa5626590ac54714c03c785b79bc671da31b10c9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:5de6f5af5a7ec862a29f187922f40678067e5f43a30e1ac5b447d640e6949444_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:e59290f20c02e4bea1f5386a6d91dbe89c013bf828c313f0bf104a7c06dbc4a6_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:321f1a7e3c212ff172de551a3c5cfa0a27c32c84a78ff4241520721814853c8f_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:5f2ed6ba16d5caa03e406c1267e988b5831bd8f15307c3562814c829d4a8ac2f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:893f3afc2446c4cc4b29fdb24a62f78a7d62b0f2971064fdb5850d100f877334_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:bededd1dc3fe1bebbe50b975e551c0267c17dd1844a6ec4b67686e00cd166a7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:4b078a2c615ac990f99243167f33a9e9b981951894bbcb0862481ade6e256b54_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:a93058af5ba0a4be5f1843f93ceaff6223b2b79004e9b39d0bcc42fa708a4b9a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:b6f43d2c90bf034761a556fea00bc24bb8f138b302620e0d64b63a99ba79e8c4_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:eaff4e7a52a636dc9589180b629504602613505e12c6327b64d9ff493bcee613_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:0beae059c6c774920bb81d418f78c43a942eac7332e29f195ab355fafad95ddf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:4c95c6d614cc6355d49daf1e29a2a95e8427dafbb2d7fd60bc498d4d12e4ce22_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:6786a3d1eb4682c3567260b49929dbc2e24a9877f9f3ae88ef7b3a09cbc812cc_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:e6e432b17e545e0cac2efc9068bcd31aa97a50cd08ad81b3d8bb951c6992253d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:faa8e7829ee9fd0038c3b7248d85062f176966c0e47a29be33b03158fde9e982_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:2c26673ab38e28885e995cdadb96e63a78ce9d6420af20cb63c0851d47fb3aca_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:655f40e392872f3cdc9d2ea99850a6bab4c9d4e41958117224929047f2eeb6de_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:7f3924aba66826c26f77aee3f069a77ff7bd038bc127e4afc8208507a6fc98b3_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:db8eefe91bc317e16f907012d0e15536fffc3178861314ef470b71172d94e4a6_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:30788bfc9daf368d79f0c5f669fc9ca41ce9252b3e6da6cbf545aeed7cc31993_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:6e8b9062d4e67140a437d89f2c25af5232db26510f2b7eaeb29300eb8cb906c8_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:8d64b2a23284e932b42780dae248e9ee3fee70312f5fe92bc5750ae970d7eb49_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:91488b016f9531b54e9ec5bff9a6d375bc3be76bdc15f16fdec9b457f712885a_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:b584f5458fb946115b0cf0f1793dc9224c5e6a4567e74018f0590805a03eb523 (For s390x architecture) The image digest is sha256:ae75a168532559fb36fe42cff4add4ac45d8ae20a13b0dc468350d5857d3a3bc (For ppc64le architecture) The image digest is sha256:fa90a8f095f747bd8bfd1778948205fa0a1d0326d48612d1397a613d6e481ea6 (For aarch64 architecture) The image digest is sha256:e48f462cee06aeadd854ea39e3a6c6bba6ee223bc4d3686d00acd78e4f19d209 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

🔗 References (9)