RHSA-2021:2130

csafUSredhat_csaf

Red Hat Security Advisory: Windows Container Support for Red Hat OpenShift 2.0.1 security and bug fix update

view advisory published 2021-06-23

The components for Windows Container Support for Red Hat OpenShift 2.0.1 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-25736USmedium6.3—
Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer co…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • Fixedopenshift4-wincw/windows-machine-config-operator-bundle@sha256:60ab0ad722725d13abdede0fa569ee4ad2ec95350584dfd51c016510142f0523_amd64 as a component of Red Hat OpenShift Container Platform 4.7

    For Windows Machine Config Operator upgrades, see the following documentation: https://docs.openshift.com/container-platform/4.7/windows_containers/windows-node-upgrades.html

    https://access.redhat.com/errata/RHSA-2021:2130
  • Fixedopenshift4-wincw/windows-machine-config-rhel8-operator@sha256:34a7784ef1e4cd3aa4a8c2151006ef56a60c8b30c9a7e25cdb198036de8c27e9_amd64 as a component of Red Hat OpenShift Container Platform 4.7

    For Windows Machine Config Operator upgrades, see the following documentation: https://docs.openshift.com/container-platform/4.7/windows_containers/windows-node-upgrades.html

    https://access.redhat.com/errata/RHSA-2021:2130
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan