RHSA-2023:2107MediumCVSS 7.5

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.9 security and bug fix update

Published
May 4, 2023
Last Modified
September 15, 2026

🔗 CVE IDs covered (3)

CVE-2022-41724 →CVE-2022-41725 →CVE-2023-25173 →

📋 Description

CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics CVE-2022-41725 — golang: net/http, mime/multipart: denial of service from excessive resource consumption CVE-2023-25173 — containerd: Supplementary groups are not set up properly

🎯 Affected products18

  • 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-controller-rhel8@sha256:0aa32b482011e2ca00a2d07ce95fd9a798dfef8083ee5f3f3eca0cc249d3fe72_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-legacy-rhel8-operator@sha256:9560819a35b6564849f680f4f496193894114247a3d56f89a473dea48f067ca0_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-log-reader-rhel8@sha256:c584e226c8e716ec0a8c32bb34890fed6694300b2d4526cf4beadbdc4e534211_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-must-gather-rhel8@sha256:ae5907fdca77f53aa4abc33853be7c20c526a552fa83c5de34c51bd50e297269_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-operator-bundle@sha256:25885d87e7e368ab92c8d2ee23c25b14f014a07ed305605d5a847aeef45b6e56_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rhel8-operator@sha256:f0b664a6d9ebb49394ab9a52e9985f79f2a4a3f9ab4b091603243a294c17939c_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:01316425b4cf28cce4e5099d5cc85726d8d0e04b52506e1e0a7783cb8421769e_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-ui-rhel8@sha256:0e1120d6c1dc0ed5b7e586e1d06a27433712a73801cb9a74369f826cba693baf_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:0d4795f85cee5a035dad89404790225165e2e98e92bbf1c2d5bd61c7897532c3_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:c0a3bfa2934f672f83a85afc0e616ad2b970b3dc0ac57d69c23d19c1b5debc8d_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-rhel8@sha256:92aaf95dedb4829b579dc500271f2a9f2f925bc9b770b6ea10a613ec06b347c7_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-velero-plugin-rhel8@sha256:6a1036a320cc796780544cdfc08c4eb3726ee1c6728c075dd6ca324a16ac35b7_amd64 as a component of 8Base-RHMTC-1.7

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (6)