What is RHEA-2023:7493?

RHEA-2023:7493 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Enhancement Advisory: OpenShift sandboxed containers 1.5.0 update

Which CVE IDs does RHEA-2023:7493 cover?

RHEA-2023:7493 covers the following CVE IDs: CVE-2023-25173. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHEA-2023:7493?

RHEA-2023:7493 has a CVSS v3 base score of 7.3, published by Red Hat Product Security.

Which products are affected by RHEA-2023:7493?

RHEA-2023:7493 affects 15 products, including: OpenShift Sandboxed Containers 1.5; openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9@sha256:aca3d50071c30b75433140f703f4a0dd8210aa07600ea94c2b1c2fbf27173893_s390x as a component of OpenShift Sandboxed Containers 1.5; openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9@sha256:ceb940eac3a9706d189549d363820f867bf5d3768b26e62aeb247a42e3a0dd93_amd64 as a component of OpenShift Sandboxed Containers 1.5; openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9@sha256:69407c8df88c2b041462f1c111ce348156010af0c483ab3189e776843799b1e5_s390x as a component of OpenShift Sandboxed Containers 1.5; openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9@sha256:d0277285d246d2015f0a94df01824801430831cfc767c9ccbb1688a9ec4dd743_amd64 as a component of OpenShift Sandboxed Containers 1.5; and others — see the full list on the advisory page.

RHEA-2023:7493MediumCVSS 7.3

Red Hat Enhancement Advisory: OpenShift sandboxed containers 1.5.0 update

Vendor

Red Hat Product Security

Published

November 27, 2023

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-25173 →

📋 Description

CVE-2023-25173 — containerd: Supplementary groups are not set up properly

🎯 Affected products15

OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9@sha256:aca3d50071c30b75433140f703f4a0dd8210aa07600ea94c2b1c2fbf27173893_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9@sha256:ceb940eac3a9706d189549d363820f867bf5d3768b26e62aeb247a42e3a0dd93_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9@sha256:69407c8df88c2b041462f1c111ce348156010af0c483ab3189e776843799b1e5_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-cloud-api-adaptor-webhook-rhel9@sha256:d0277285d246d2015f0a94df01824801430831cfc767c9ccbb1688a9ec4dd743_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-monitor-rhel9@sha256:0cdbaed1c4e0fab4dd2ab109bfeb364997731ae8ef7c4e84b8cac397835f2053_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-monitor-rhel9@sha256:dce657064e74cf9790aeb155ecdf49b336311dd3afc76681f6e979110d8d6b10_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-must-gather-rhel9@sha256:8ead5cc2fba3a375f48748eb6dd2883728e1ac62f8afc6503bc4e034164a535c_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-must-gather-rhel9@sha256:91f6a0ab0f45b384850c0fec87a38bf9bf3455cfde4720975e646c542b00d6b7_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-operator-bundle@sha256:ab665121f5a9e3a9d7f7db76ff4c9d81bf2868a06a4deb6e13436b3a4f096823_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-operator-bundle@sha256:e51e8c3e5fc5fc24c1488303e2d92adf101813d1593add947558336c40127dc4_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-podvm-payload-rhel9@sha256:112f7dd50d65cdb5046ac16e88ceed3804f6861fc7271db2a2b842b0b4931360_amd64 as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-podvm-payload-rhel9@sha256:989610c8ad1eb4b71be1498e40cca9b76d7edad27712fd165d3564c9d4006078_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-rhel9-operator@sha256:32af14d95384759d0bc71c5a3243de5ed5baad46c115d32d5c87ff2379554067_s390x as a component of OpenShift Sandboxed Containers 1.5
openshift-sandboxed-containers/osc-rhel9-operator@sha256:4adb6f488fa6e2ee6e1a59665cecb49cebc0d0de6b8790abb3b1001f40f2a5fd_amd64 as a component of OpenShift Sandboxed Containers 1.5

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (22)

selfhttps://access.redhat.com/errata/RHEA-2023:7493
externalhttps://issues.redhat.com/browse/KATA-2135
externalhttps://issues.redhat.com/browse/KATA-2251
externalhttps://issues.redhat.com/browse/KATA-2302
externalhttps://issues.redhat.com/browse/KATA-2317
externalhttps://issues.redhat.com/browse/KATA-2321
externalhttps://issues.redhat.com/browse/KATA-2402
externalhttps://issues.redhat.com/browse/KATA-2411
externalhttps://issues.redhat.com/browse/KATA-2451
externalhttps://issues.redhat.com/browse/KATA-2452
externalhttps://issues.redhat.com/browse/KATA-2453
externalhttps://issues.redhat.com/browse/KATA-2454
externalhttps://issues.redhat.com/browse/KATA-2461
externalhttps://issues.redhat.com/browse/KATA-2462
externalhttps://issues.redhat.com/browse/KATA-2463
externalhttps://issues.redhat.com/browse/KATA-2464
externalhttps://issues.redhat.com/browse/KATA-2465
externalhttps://issues.redhat.com/browse/KATA-2466
externalhttps://issues.redhat.com/browse/KATA-2475
externalhttps://issues.redhat.com/browse/KATA-2476
externalhttps://issues.redhat.com/browse/KATA-2515
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhea-2023_7493.json