(RHSA-2024:0195) Moderate: OpenShift Container Platform 4.13.29 packages and security update

2024-01-1716:53:27

access.redhat.com

red hat

openshift

container platform

security update

kubernetes

cloud computing

rpm packages

cri-o

cve-2023-6476

security issue

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

24.1%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.29. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2024:0193

Security Fix(es):

cri-o: Pods are able to break out of resource confinement on cgroupv2 (CVE-2023-6476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xkernel< 5.14.0-284.48.1.el9_2kernel-5.14.0-284.48.1.el9_2.s390x.rpm
RedHat8x86_64openshift-hyperkube< 4.13.0-202401041732.p0.g9ed7eae.assembly.stream.el8openshift-hyperkube-4.13.0-202401041732.p0.g9ed7eae.assembly.stream.el8.x86_64.rpm
RedHat9ppc64lekernel-tools-libs-devel< 5.14.0-284.48.1.el9_2kernel-tools-libs-devel-5.14.0-284.48.1.el9_2.ppc64le.rpm
RedHat9aarch64kernel-64k-debug-modules< 5.14.0-284.48.1.el9_2kernel-64k-debug-modules-5.14.0-284.48.1.el9_2.aarch64.rpm
RedHat9x86_64kernel-rt-kvm< 5.14.0-284.48.1.rt14.333.el9_2kernel-rt-kvm-5.14.0-284.48.1.rt14.333.el9_2.x86_64.rpm
RedHat9aarch64kernel-64k-debug-modules-internal< 5.14.0-284.48.1.el9_2kernel-64k-debug-modules-internal-5.14.0-284.48.1.el9_2.aarch64.rpm
RedHat9s390xbpftool-debuginfo< 7.0.0-284.48.1.el9_2bpftool-debuginfo-7.0.0-284.48.1.el9_2.s390x.rpm
RedHat9x86_64kernel-debug-modules-partner< 5.14.0-284.48.1.el9_2kernel-debug-modules-partner-5.14.0-284.48.1.el9_2.x86_64.rpm
RedHat9ppc64lecri-o< 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9cri-o-1.26.4-6.1.rhaos4.13.git9eb9cf3.el9.ppc64le.rpm
RedHat9aarch64cri-o-debugsource< 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9cri-o-debugsource-1.26.4-6.1.rhaos4.13.git9eb9cf3.el9.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	kernel	< 5.14.0-284.48.1.el9_2	kernel-5.14.0-284.48.1.el9_2.s390x.rpm
RedHat	8	x86_64	openshift-hyperkube	< 4.13.0-202401041732.p0.g9ed7eae.assembly.stream.el8	openshift-hyperkube-4.13.0-202401041732.p0.g9ed7eae.assembly.stream.el8.x86_64.rpm
RedHat	9	ppc64le	kernel-tools-libs-devel	< 5.14.0-284.48.1.el9_2	kernel-tools-libs-devel-5.14.0-284.48.1.el9_2.ppc64le.rpm
RedHat	9	aarch64	kernel-64k-debug-modules	< 5.14.0-284.48.1.el9_2	kernel-64k-debug-modules-5.14.0-284.48.1.el9_2.aarch64.rpm
RedHat	9	x86_64	kernel-rt-kvm	< 5.14.0-284.48.1.rt14.333.el9_2	kernel-rt-kvm-5.14.0-284.48.1.rt14.333.el9_2.x86_64.rpm
RedHat	9	aarch64	kernel-64k-debug-modules-internal	< 5.14.0-284.48.1.el9_2	kernel-64k-debug-modules-internal-5.14.0-284.48.1.el9_2.aarch64.rpm
RedHat	9	s390x	bpftool-debuginfo	< 7.0.0-284.48.1.el9_2	bpftool-debuginfo-7.0.0-284.48.1.el9_2.s390x.rpm
RedHat	9	x86_64	kernel-debug-modules-partner	< 5.14.0-284.48.1.el9_2	kernel-debug-modules-partner-5.14.0-284.48.1.el9_2.x86_64.rpm
RedHat	9	ppc64le	cri-o	< 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9	cri-o-1.26.4-6.1.rhaos4.13.git9eb9cf3.el9.ppc64le.rpm
RedHat	9	aarch64	cri-o-debugsource	< 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9	cri-o-debugsource-1.26.4-6.1.rhaos4.13.git9eb9cf3.el9.aarch64.rpm