Headline

RHSA-2023:4459: Red Hat Security Advisory: OpenShift Container Platform 4.13.8 packages and security update

Red Hat OpenShift Container Platform release 4.13.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2023-24539: A flaw was found in golang where angle brackets (<>) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a ‘/’ character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if executed with untrusted input.
CVE-2023-29400: A flaw was found in golang. Templates containing actions in unquoted HTML attributes, for example, “attr={{.}}”) executed with empty input, could result in output that has unexpected results when parsed due to HTML normalization rules. This issue may allow the injection of arbitrary attributes into tags.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #redis #kubernetes #ibm #rpm

Synopsis

Moderate: OpenShift Container Platform 4.13.8 packages and security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 4.13.8 is now available with updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container Platform 4.13.

Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.8. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2023:4456

Security Fix(es):

golang: html/template: improper sanitization of CSS values (CVE-2023-24539)
golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

Affected Products

Red Hat OpenShift Container Platform 4.13 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.13 for RHEL 8 x86_64
Red Hat OpenShift Container Platform for Power 4.13 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.13 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 8 s390x
Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 8 aarch64

Fixes

BZ - 2196026 - CVE-2023-24539 golang: html/template: improper sanitization of CSS values
BZ - 2196029 - CVE-2023-29400 golang: html/template: improper handling of empty HTML attributes
OCPBUGS-17339 - Placeholder bug for OCP 4.13.0 rpm release

References

https://access.redhat.com/security/updates/classification/#moderate
https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html

Red Hat OpenShift Container Platform 4.13 for RHEL 9

SRPM

cri-tools-1.26.0-3.el9.src.rpm

SHA-256: f13adbeb9eda5ccbdaafec8d4587beeac52dd2c5366df18b2089b606691eed01

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9.src.rpm

SHA-256: e0bbf18af946f79c71d6013c48d8bf8fa6983c70fdfcb730f95be89356b95abd

ovn23.06-23.06.0-51.el9fdp.src.rpm

SHA-256: 9f9f70ddbbe0eaaef455a1bbda5f7e522cc3d581cdcf37c985896ec4c464f601

ovn23.09-23.09.0-alpha.78.el9fdp.src.rpm

SHA-256: 7660ffe8fb186b37b8fea71d39fd1b97494dd9eceab0a865195c6474bb6c3bb7

x86_64

cri-tools-1.26.0-3.el9.x86_64.rpm

SHA-256: a0c6a5ced460a8b858fd2caae562d49556873e3f22114222f11ff51adccccfad

cri-tools-debuginfo-1.26.0-3.el9.x86_64.rpm

SHA-256: 64f1795ae5f72bfc47c4a90a9d511673a4d03f214b8cc413d026b3074818bf0e

cri-tools-debugsource-1.26.0-3.el9.x86_64.rpm

SHA-256: dfc8da892eca786b3f674ee03cb5cb5e6e7fc11a894d9dcf231dfb12a1200f50

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9.x86_64.rpm

SHA-256: d78323860b1c8706659ae1736743cc6836d3e24c03bcb0c068891469aba84c8f

openshift-clients-redistributable-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9.x86_64.rpm

SHA-256: a63ba369da2c58a1e4b97e6e3d5f5a1dc086ec84a3a7cf9b98f7ad683a9dbca3

ovn23.06-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 2a7b540c2f2b8f948041152f3b0d411c6f462c4f62865f35c79008f4d498a3c6

ovn23.06-central-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: f63088bb4bcce89772f9a3ab436264ae2259fd2d7e15958e248c23f8a6ac43c9

ovn23.06-central-debuginfo-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 2102fae9cc7a2d8396125590ce0dcdda14e4a283dd5735fd6dfc94167101fc7f

ovn23.06-debuginfo-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 1fe7c0768e7f447b84f0445a050567dd8a1c471e7194e6fc32bd77a8bba78561

ovn23.06-debugsource-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 5b41251952037069e34a76f98b00f0429413f32945bcdce470171a3fbfd037c4

ovn23.06-host-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: c5188f844290f638b85b455ea8f014d8bab5f8e8716000ca00e23d33c5cea2c1

ovn23.06-host-debuginfo-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 5cfac136fae047fb8831afaefc7bba5b31fb9c3cfd1642c0826b9e5bc2352597

ovn23.06-vtep-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: 1a9e0904e82688166e7334f8ae7179ed49260b7336b509d46094a95b4a079a4f

ovn23.06-vtep-debuginfo-23.06.0-51.el9fdp.x86_64.rpm

SHA-256: a4d35a5a4c023d472eccc1232189cd0d19614d0b9734fe023686647df92e9f65

ovn23.09-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 85333def0d2883235bfb855218278c0ecec7555d6642b68bf6e2ef294017b800

ovn23.09-central-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 17880d16284e81bcb6c5a8dc0a58c4840327171e0a1980dd0b0e0a570514c08d

ovn23.09-central-debuginfo-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 5091b135a1dd84eeaddafca2ef369ec45debd7f43806ef0c372e2a85811330f0

ovn23.09-debuginfo-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 26d3f62945bf30ae7a7e881fecc4dd62f3b3298f5bff77910f07e4b194770260

ovn23.09-debugsource-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: bfe6b8369963b5f41042a4c6f652f5b080d963a12f3b470fcec95b40615abb7b

ovn23.09-host-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 45f0148a621b55e8e6e9652da1cee968074694bf46b9f0afc55dbaafac32d3f7

ovn23.09-host-debuginfo-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 1f46442fc27b05d229630227f7bc1c385f1861183b29ee06f1dff6d33c369bca

ovn23.09-vtep-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: b47c48c90620f0181659e3d362210a6c47b6caa3c331eb576c2afeaec259175a

ovn23.09-vtep-debuginfo-23.09.0-alpha.78.el9fdp.x86_64.rpm

SHA-256: 2607549273569baa0385831fab84a62ad3aaa73678f36c5ac8832ff8648d945b

Red Hat OpenShift Container Platform 4.13 for RHEL 8

SRPM

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8.src.rpm

SHA-256: 5ace9936fe2d38e0644ad8d744f554c2b36ca07469aa3375de1edb71d7953b57

openshift-kuryr-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.src.rpm

SHA-256: 54213f69fd55615440ced97b9859e2942c1fc6e086ce3d3a1a49cb9652b9282e

x86_64

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8.x86_64.rpm

SHA-256: a7654f9c6a5b6826ea46516a318821b5c8ea137541cfeeb87d343c45ca1aa42f

openshift-clients-redistributable-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8.x86_64.rpm

SHA-256: d779b02463dfd9dc5f3c5368dd7d90618b31fa886e06ed0d8079e2f68805e5f5

openshift-kuryr-cni-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.noarch.rpm

SHA-256: c22a2d4fc812177b160246e3d1b64381451a88cac6d71c6431ba5ebbdc1968d7

openshift-kuryr-common-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.noarch.rpm

SHA-256: 330c1a6b08cf5f5376f5ddfaa7fe112794df97c73082e7ec153769566ab5a4d7

openshift-kuryr-controller-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.noarch.rpm

SHA-256: 598f4c073b5e77176fb16c9e677fee53af196d68543d0475c4c84ea599c15a55

python3-kuryr-kubernetes-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.noarch.rpm

SHA-256: b027ef279e87bc1e939608f52c96f9e664c025cf82317346253ecbb92799127f

Red Hat OpenShift Container Platform for Power 4.13 for RHEL 9

SRPM

cri-tools-1.26.0-3.el9.src.rpm

SHA-256: f13adbeb9eda5ccbdaafec8d4587beeac52dd2c5366df18b2089b606691eed01

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9.src.rpm

SHA-256: e0bbf18af946f79c71d6013c48d8bf8fa6983c70fdfcb730f95be89356b95abd

ovn23.06-23.06.0-51.el9fdp.src.rpm

SHA-256: 9f9f70ddbbe0eaaef455a1bbda5f7e522cc3d581cdcf37c985896ec4c464f601

ovn23.09-23.09.0-alpha.78.el9fdp.src.rpm

SHA-256: 7660ffe8fb186b37b8fea71d39fd1b97494dd9eceab0a865195c6474bb6c3bb7

ppc64le

cri-tools-1.26.0-3.el9.ppc64le.rpm

SHA-256: 7e185cfa55a4b31fdf7bc497be5ced51ca0e6ae9ca96a53d2dafa4d0b699891f

cri-tools-debuginfo-1.26.0-3.el9.ppc64le.rpm

SHA-256: b68f94ac2f2d9f79499c0f7c59f8b2e430eefcb85d1ab297501e6309979d15f5

cri-tools-debugsource-1.26.0-3.el9.ppc64le.rpm

SHA-256: 743c09d3ae86a19d8d355ed2245903833bff700da1443f3824c219767b6bdb80

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el9.ppc64le.rpm

SHA-256: ad71fedcdffb44e7cc35f2da0e28c395b099cd7b4921dc06a95a4c993cd4f712

ovn23.06-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: 55fc614da28480c78ece70eb174cdd185a26b3c3db8eee3290a15c131853f555

ovn23.06-central-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: e124a4c96b1b58d9d5577283cb62696da5b140208cbc2aa330f638a68a2c09e4

ovn23.06-central-debuginfo-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: 077e5b9f216364e0081e16ce1361b3640f8df31eb2724f2901351b52c4456ecb

ovn23.06-debuginfo-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: de18f81aa917d4fe7e0a9a489ddc32b20a3bd553e1be011c8dbf76074d516e9f

ovn23.06-debugsource-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: e874c39be893bd503f75da393c793534a00602d11addf1620dc9b46bdab5f43d

ovn23.06-host-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: f0749387071da3634fa37fe6e4b71833764bd023741cdfaba7aa1961d62cd795

ovn23.06-host-debuginfo-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: 8a57174c8f5a91a07f41a2b5cdd762b551613ab39c1322046e2c00528dac776a

ovn23.06-vtep-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: 64bc64f1de1fdf008e1e3cf244936ca7cdd54f1384b0d4d0943ba64476abea87

ovn23.06-vtep-debuginfo-23.06.0-51.el9fdp.ppc64le.rpm

SHA-256: e399a0165568b3e872a64190ae32293c5f41ca053c31f064cd4a0dcd839b69d7

ovn23.09-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: e092f7fc3a4fcd8491b5731fff9c7e86c78684419fccc3e7b0711e16fb784d34

ovn23.09-central-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: 733b21d0ba1182d65dc6e53e12ce7b63b2a99b95e0458ed49e6a9a46a84526db

ovn23.09-central-debuginfo-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: 3f15ca4996b61ce00520fd6d8525c1227d4169595b091193d59e4b8e66025402

ovn23.09-debuginfo-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: 7660eb63ec0deed10ec265b7d1dec3feb6b796e69b93935087ae385c3e1541f6

ovn23.09-debugsource-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: 55524965d31f4e3570627ce868974fe22e749abc53fca2ff90dabc8b5876012b

ovn23.09-host-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: 22f04778ae1b92416274beccaab1e029d9cfca51caf73932491f2a4ab2c98cd8

ovn23.09-host-debuginfo-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: c7e0c2b896e46f0d7e3c472905f44204e2fe334fa626ec7b310ff0bd7c82c810

ovn23.09-vtep-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: ce075354003568d8395ba0149ba5589d7877ef1694686c358eee6d10236e1ad8

ovn23.09-vtep-debuginfo-23.09.0-alpha.78.el9fdp.ppc64le.rpm

SHA-256: eb28d7c1f56c7ec377172c8a2933c732db36d789002b208fc3f685df0fbde696

Red Hat OpenShift Container Platform for Power 4.13 for RHEL 8

SRPM

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8.src.rpm

SHA-256: 5ace9936fe2d38e0644ad8d744f554c2b36ca07469aa3375de1edb71d7953b57

openshift-kuryr-4.13.0-202307191602.p0.g36754b7.assembly.stream.el8.src.rpm

SHA-256: 54213f69fd55615440ced97b9859e2942c1fc6e086ce3d3a1a49cb9652b9282e

ppc64le

openshift-clients-4.13.0-202307282024.p0.ge251b5e.assembly.stream.el8.ppc64le.rpm

SHA-256: 7140e56635668cf242a1953aa517ca7b2a67a02116ceeda720c5582bc1acede7