Red Hat Security Advisory

RHSA-2023:2107

Migration Toolkit for Containers (MTC) 1.7.9 security and bug fix update

Released 2023-05-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

8Base-RHMTC-1.7 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-velero-plugin-rhel8

TI-2023-10635 CVE-2023-25173 · GHSA-hmfx-3pcx-653p

HIGH 67

containerd is an open source container runtime.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00542 Published 2023-02-16 Partial fix · 1.5.18, 1.6.18 CWE-863

TI-2022-20116 CVE-2022-41725 · GHSA-w4h2-22wh-m6jx

MEDIUM 41

A denial of service is possible from excessive resource consumption in net/http and mime/multipart.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01241 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-770

TI-2022-20115 CVE-2022-41724 · GHSA-89mw-w342-mqrr

MEDIUM 41

Large handshake records may cause panics in crypto/tls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-400