Issued:
2023-07-27
Updated:
2023-07-27

RHSA-2023:4290 - Moderate: OpenShift sandboxed containers 1.4.1 security update

Synopsis

Moderate: OpenShift sandboxed containers 1.4.1 security update

Type/Severity

Security Advisory Moderate

Topic

OpenShift sandboxed containers 1.4.1 is now available.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

OpenShift sandboxed containers support for OpenShift Container Platform provides users with built-in support for running Kata containers as an additional, optional runtime.

This advisory contains a security update for OpenShift sandboxed containers, as well as bug fixes.

Security fix:

  • A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated. (CVE-2023-3089)

For more information about the additional fixes in this release, see the Release Notes documentation:

https://access.redhat.com/documentation/en-us/openshift_sandboxed_containers/1.4/html-single/openshift_sandboxed_containers_release_notes/

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat OpenShift Container Platform4.12x86_64

Fixes

CVEs

References

Additional information