Stay Secure with the Latest Linux Advisories

security advisorysecurity updatered hat

Red Hat: RHSA-2023:4780-01 Important: Windows Containers Security Update

The components for Red Hat OpenShift support for Windows Containers 6.0.2 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenShift support for Windows Containers 6.0.2 security update Advisory ID: RHSA-2023:4780-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2023:4780 Issue date: 2023-08-28 CVE Names: CVE-2023-3676 CVE-2023-3955 ===================================================================== 1. Summary: The components for Red Hat OpenShift support for Windows Containers 6.0.2 are now available. This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift support for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers. Security Fix(es): * kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation (CVE-2023-3676) * kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation (CVE-2023-3955) For more details about the security issue(s), including the impact, CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For Windows Machine Config Operator upgrades, see thefollowing documentation: https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/windows_container_support_for_openshift/windows-node-upgrades 4. Bugs fixed (https://bugzilla.redhat.com/): 2227126 - CVE-2023-3676 kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation 2227128 - CVE-2023-3955 kubernetes: Insufficient input sanitization on Windows nodes leads to privilege escalation 5. References: https://access.redhat.com/security/cve/CVE-2023-3676 https://access.redhat.com/security/cve/CVE-2023-3955 https://access.redhat.com/security/updates/classification/#important 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJk7QgkAAoJENzjgjWX9erEUu4P/2Hvmeyg0jHQw2rLQ1ED3dX0 kptdygVzvyG+z1Pp8iweV07E/9BGA1EyzF48mZJFH97j8fHXHSJQMfq9oGNzl32H T3p+WgELIUK9i7xiXRm18vma4ROIcXyUVI3Z2rKxqfDaeQa3+5C5BafFku+cXp6l Dh5k7nl2cImTpHqgqS95W82H1SIHzcgfORWRpPxzfFIyPSajXHZSHSfpY0XnPcRK kRetszPrvTrO4ISE7JM29kQVmz3DBNLtjTKpTYG1mT4yCB5qVsWShwZBEqs3X30y 3eSPD1YREzUyP2bhgU8/RS09wxxbo00XJT5gqDZG6A9evM1yhbf4SuoTUl0+CuyU AT+qaLZ6HUbJavEkSqmkbtayg4uS/E87gKl3x/542TzmuK9hoFCJOnY4aPsfUkWu teIVxcp8egLWm4K4pjQq2yBErPmsbge+KI2RI3dlgdY35ZXU3bw3nxczVM6dBVfO A/51iXilr4zKtlI/REYPiAm4Q3eBIZ/B8EgmDjV4O+qduK0kO6jgK60Qg0DFxFe7 ZUTdnErMGiSzREMwVygNVL7p0OKKdvlA18D7vI6Nu48YPl4hXYgEPE2k9p/HfNJi WUqJzw9rYp8dxNeyfG1zIUEcPzjgL0YlnAOG25nAQcxTYdScKbzoAzhXxdPOl8Io B4qqW7RTnAQxucT/TlbG =Yghj -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Significant Red Hat OpenShift revision bolsters Windows container functionality with essential patches and security upgrades.. Red Hat, OpenShift, Windows Containers, Security Update, Privilege Escalation. . Severity: Important. LinuxSecurity.com Team

Aug 28, 2023 •Important Red Hat