RHSA-2023:4488MediumCVSS 7.5
Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 6.0.1[security update]
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-27191 — golang: crash in a golang.org/x/crypto/ssh server CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2023-25173 — containerd: Supplementary groups are not set up properly
🎯 Affected products3
- Red Hat OpenShift Container Platform 4.11
- openshift4-wincw/windows-machine-config-operator-bundle@sha256:cd4c5c5b0fa1691a48d2ac33a2794c89e8e60d804a6e36d42ccd868b90c5ac05_amd64 as a component of Red Hat OpenShift Container Platform 4.11
- openshift4-wincw/windows-machine-config-rhel8-operator@sha256:0326010fe1acf466d43a363bf7285a814443c73a2be821cdd7465c0defa04401_amd64 as a component of Red Hat OpenShift Container Platform 4.11
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2023:4488
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2064702
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092793
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2174485
- externalhttps://issues.redhat.com/browse/OCPBUGS-10418
- externalhttps://issues.redhat.com/browse/OCPBUGS-11831
- externalhttps://issues.redhat.com/browse/OCPBUGS-15435
- externalhttps://issues.redhat.com/browse/OCPBUGS-3572
- externalhttps://issues.redhat.com/browse/OCPBUGS-4247
- externalhttps://issues.redhat.com/browse/OCPBUGS-5894
- externalhttps://issues.redhat.com/browse/OCPBUGS-7726
- externalhttps://issues.redhat.com/browse/OCPBUGS-8055
- externalhttps://issues.redhat.com/browse/WINC-818
- externalhttps://issues.redhat.com/browse/WINC-823
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4488.json