RHSA-2023:4892MediumCVSS 5.3

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.12 security and bug fix update

Published
August 31, 2023
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2023-24532 — golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results

🎯 Affected products18

  • 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-controller-rhel8@sha256:064fda52e67ca2a5952a3c5907610cd2dc169d2ffe075d4ffac61693f401caf1_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-hook-runner-rhel8@sha256:cd222d1a89927006d230dc522e1d3bd8e8356d9bb8a25d25978c5e760d9777eb_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-legacy-rhel8-operator@sha256:0af41bcdfc3104b6a661a6d79ec600f8d9b50fd8de8ff6d0e08234d5cfda433c_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-log-reader-rhel8@sha256:cf8a0acc5f6fb258c28f0ef6af05eb4ba50e584ff0f703561f50aabae65339b5_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-must-gather-rhel8@sha256:364e6ff8859bb4ea51766eff27c2974f97616336d2cd8ff4affdb40d7c10a14c_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-openvpn-rhel8@sha256:ff7ed533c04b343eb3b1562d7bcf81b2ab44df557b3798f25af7ec371632f7e4_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-operator-bundle@sha256:9f82a2133d2b33b25f6c99c9a83cf69d636509d33ff636748cf1709aee215d6e_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-registry-rhel8@sha256:e8454672c63475813af0e3d114d80b8c07fc686041fbec16850dafae365b6346_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rhel8-operator@sha256:e0d836ccd0051f5e66d2db838683c9b718be7d86f9d197affab50513a0a33fae_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:7eb1d3af9e38920284e5f884add7d924c26e19527a93410ba0caebc60610f993_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-ui-rhel8@sha256:4abcda42d46c19f4832eeb5ba6a828e7b46c47ffa7b435c1bb3c73621e7041e7_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:b156f8b4d347068175cf8e63dd4ae5f996fd2da37583b3af78a17566f6ae799c_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:cb614daf5d4b563af636e94cf5569ccc6623bcccc2f7471f45573539ed37b164_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:84b6e44c5e878eba056a95832f34581ec54690dcbc9b8a2e1b416dd426a4e4ad_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:65b9f6be2c592306373daa8cdcbf5f791a674ae62198a87e4d608308272d74b7_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-rhel8@sha256:2d5d1c7723833c83089c61835a8697e5af6bf2e8f16ae21f1a046e8b5e701649_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-velero-plugin-rhel8@sha256:60a25312b943e5f6dba5610817c98bdfbc297e60d53742559285174ebecf2a57_amd64 as a component of 8Base-RHMTC-1.7

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)