Skip to content
OpenAdvisories
Medium RHBA-2023:1037 1 CVE

Red Hat Bug Fix Advisory: Red Hat build of MicroShift 4.12.6 bug fix and enhancement update

Published Sep 16, 2024 · Updated Jun 4, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.12::el8 microshift 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8
Red Hat · OpenShift 4 openshift:4.12::el8 microshift-networking 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8
Red Hat · OpenShift 4 openshift:4.12::el8 microshift-release-info 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8
Red Hat · OpenShift 4 openshift:4.12::el8 microshift-selinux 0:4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8

Vulnerabilities 1

  • Medium 6.3
    CVE-2023-0229

    github.com/openshift/apiserver-library-go Improper Input Validation vulnerability

    A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used i…

    github.com/openshift/apiserver-library-go Go

References

  • article
    https://issues.redhat.com/browse/OCPBUGS-8077
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_1037.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-0229
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2160349
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-0229
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-0229
  • advisory
    https://github.com/advisories/GHSA-5465-xc2j-6p84