RHSA-2023:7200: Important: OpenShift Container Platform 4.15.z security update
Important: OpenShift Container Platform 4.15.z security update
Other sources
Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built from the edge capabilities of Red Hat OpenShift. MicroShift is an application that is deployed on top of Red Hat Enterprise Linux devices at<br>the edge, providing an efficient way to operate single-node clusters in these low-resource environments.<br>This advisory contains the RPM packages for Red Hat build of MicroShift 4.15.0. Read the following advisory for the container images for this<br>release:<br><a href="https://access.redhat.com/errata/RHSA-2023:7198" target="blank">https://access.redhat.com/errata/RHSA-2023:7198</a> Security Fix(es):<br><li> golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)</li> <li> golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)</li> <li> golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/microshiftto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshift-greenbootto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshift-networkingto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshift-olmto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshift-release-infoto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshift-selinuxto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 - Upgrade
Upgrade
redhat/microshiftto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9.aa - Upgrade
Upgrade
redhat/microshift-networkingto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9.aa - Upgrade
Upgrade
redhat/microshift-olmto a version that resolves this vulnerability.Fixed in 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9.aa - Upgrade
Upgrade
Red Hat OpenShift Container Platformto a version that resolves this vulnerability.Fixed in 4.15.z
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:7200?
The severity of RHSA-2023:7200 is classified as important.
What products are affected by RHSA-2023:7200?
RHSA-2023:7200 affects Red Hat OpenShift Container Platform on various architectures including ARM 64, IBM Z, LinuxONE, and Power.
How do I fix RHSA-2023:7200?
To fix RHSA-2023:7200, update your Red Hat OpenShift Container Platform to the latest version available.
When was the RHSA-2023:7200 advisory released?
The RHSA-2023:7200 advisory was released on a date in the year 2023.
Does RHSA-2023:7200 apply to edge device deployments using MicroShift?
Yes, RHSA-2023:7200 specifically includes the Red Hat build of MicroShift for edge device deployments.