Red Hat Security Advisory: Windows Container Support for Red Hat OpenShift 2.0.1 security and bug fix update
The components for Windows Container Support for Red Hat OpenShift 2.0.1 are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25736US | medium6.3 | — | ||
Kube-proxy
on Windows can unintentionally forward traffic to local processes
listening on the same port (“spec.ports[*].port”) as a LoadBalancer
Service when the LoadBalancer co… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2021:2130self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1945248external
- 1946538external
- 1952917external
- 1955319external
- 1956412external
- 1963263external
Behebungen (2)
- Behobenopenshift4-wincw/windows-machine-config-operator-bundle@sha256:60ab0ad722725d13abdede0fa569ee4ad2ec95350584dfd51c016510142f0523_amd64 as a component of Red Hat OpenShift Container Platform 4.7
For Windows Machine Config Operator upgrades, see the following documentation: https://docs.openshift.com/container-platform/4.7/windows_containers/windows-node-upgrades.html
https://access.redhat.com/errata/RHSA-2021:2130 - Behobenopenshift4-wincw/windows-machine-config-rhel8-operator@sha256:34a7784ef1e4cd3aa4a8c2151006ef56a60c8b30c9a7e25cdb198036de8c27e9_amd64 as a component of Red Hat OpenShift Container Platform 4.7
For Windows Machine Config Operator upgrades, see the following documentation: https://docs.openshift.com/container-platform/4.7/windows_containers/windows-node-upgrades.html
https://access.redhat.com/errata/RHSA-2021:2130
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan