Important: Migration Toolkit for Containers (MTC) 1.8.7 security and bug fix update

Important: Migration Toolkit for Containers (MTC) 1.8.5 security and bug fix update

Important: Migration Toolkit for Containers (MTC) 1.8.4 security and bug fix update

Important: MTV 2.6.6 Images

Moderate: Migration Toolkit for Containers (MTC) 1.7.15 security and bug fix update

Moderate: Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.Security Fix(es) from Bugzilla: nodejs-semver: Regular expression denial of service (CVE-2022-25883) tough-cookie: prototype pollution in cookie memstore (CVE-2023-26136) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Important: Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update

Important: Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update

Moderate: Migration Toolkit for Containers (MTC) 1.7.13 security and bug fix update

Important: Migration Toolkit for Containers (MTC) 1.8.0 security and bug fix update

Moderate: Migration Toolkit for Containers (MTC) 1.7.12 security and bug fix update

Moderate: Migration Toolkit for Containers (MTC) 1.7.11 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.Security Fix(es) from Bugzilla: golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724) golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725) containerd: Supplementary groups are not set up properly (CVE-2023-25173) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.<br>Security Fix(es) from Bugzilla:<br><li> async: Prototype Pollution in async (CVE-2021-43138)</li> <li> golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)</li> <li> golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)</li> <li> golang: net/<a href="http:" target="blank">http:</a> handle server errors after sending GOAWAY (CVE-2022-27664)</li> <li> golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags (CVE-2022-32149)</li> <li> golang: net/url: JoinPath does not strip relative path components in all circumstances (CVE-2022-32190)</li> <li> golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)</li> <li> golang: net/<a href="http:" target="blank">http:</a> An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)</li> <li> golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.Security Fix(es) from Bugzilla: nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes (CVE-2021-3807) node-fetch: exposure of sensitive information to an unauthorized actor (CVE-2022-0235) follow-redirects: Exposure of Sensitive Information via Authorization Header leak (CVE-2022-0536) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that cluster.

The Migration Toolkit for Containers (MTC) enables you to migrateKubernetes resources, persistent volume data, and internal container imagesbetween OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.