RHSA-2023:4025LowCVSS 7.3
Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 7.1.0 [security update]
🔗 CVE IDs covered (1)
📋 Description
CVE-2023-25173 — containerd: Supplementary groups are not set up properly
🎯 Affected products3
- Red Hat OpenShift Container Platform 4.12
- openshift4-wincw/windows-machine-config-operator-bundle@sha256:5623b1b97c1423e31ba92d1fcf5bc73a90d7a08a08c941b883c139035deeb7c5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
- openshift4-wincw/windows-machine-config-rhel8-operator@sha256:7057aa220818c452c1edfbe8d049a74807ee24162e32f1ffe2e5116e9b508336_amd64 as a component of Red Hat OpenShift Container Platform 4.12
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (22)
- selfhttps://access.redhat.com/errata/RHSA-2023:4025
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2174485
- externalhttps://issues.redhat.com/browse/OCPBUGS-10417
- externalhttps://issues.redhat.com/browse/OCPBUGS-10784
- externalhttps://issues.redhat.com/browse/OCPBUGS-10933
- externalhttps://issues.redhat.com/browse/OCPBUGS-10935
- externalhttps://issues.redhat.com/browse/OCPBUGS-11667
- externalhttps://issues.redhat.com/browse/OCPBUGS-11785
- externalhttps://issues.redhat.com/browse/OCPBUGS-13790
- externalhttps://issues.redhat.com/browse/OCPBUGS-14260
- externalhttps://issues.redhat.com/browse/OCPBUGS-14445
- externalhttps://issues.redhat.com/browse/OCPBUGS-4862
- externalhttps://issues.redhat.com/browse/OCPBUGS-7336
- externalhttps://issues.redhat.com/browse/OCPBUGS-7843
- externalhttps://issues.redhat.com/browse/OCPBUGS-8037
- externalhttps://issues.redhat.com/browse/OCPBUGS-8056
- externalhttps://issues.redhat.com/browse/OCPBUGS-8085
- externalhttps://issues.redhat.com/browse/WINC-1037
- externalhttps://issues.redhat.com/browse/WINC-981
- externalhttps://issues.redhat.com/browse/WINC-983
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4025.json