Red Hat Security Advisory

RHSA-2023:4488

Red Hat OpenShift support for Windows Containers 6.0.1[security update]

Released 2023-08-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.11 openshift4-wincw/windows-machine-config-rhel8-operator

Fixes 3 records

TI-2023-10635 CVE-2023-25173 · GHSA-hmfx-3pcx-653p

containerd supplementary groups are not set up properly

HIGH 67

containerd is an open source container runtime.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00542 Published 2023-02-16 Partial fix · 1.5.18, 1.6.18 CWE-863

TI-2022-10313 CVE-2022-27191 · GHSA-8c26-wmh5-6g9v

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go…

MEDIUM 40

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03963 Published 2022-03-18 Partial fix · 0.0.0-20220314234659-1baeb1ce4c0b CWE-327

TI-2022-12765 CVE-2022-30629 · GHSA-j55j-52j7-vq87

Session tickets lack random ticket_age_add in crypto/tls

LOW 18

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0121 Published 2022-08-09 Partial fix · 1.17.11, 1.18.3 CWE-330