Headline
RHSA-2023:1408: Red Hat Security Advisory: OpenShift Container Platform 4.12.9 packages and security update
Red Hat OpenShift Container Platform release 4.12.9 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2022-46149: A flaw was found in capnproto and capnp projects where a specially-crafted pointer could escape bounds checking by exploiting inconsistent handling of pointers when a list-of-structs is downgraded to a list-of-pointers.
Issued:
2023-03-27
Updated:
2023-03-27
RHSA-2023:1408 - Security Advisory
- Overview
- Updated Packages
Synopsis
Moderate: OpenShift Container Platform 4.12.9 packages and security update
Type/Severity
Security Advisory: Moderate
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
Red Hat OpenShift Container Platform release 4.12.9 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.12.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.9. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHSA-2023:1409
Security Fix(es):
- capnproto: out of bounds read when handling a list of lists. (CVE-2022-46149)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html
Affected Products
- Red Hat OpenShift Container Platform 4.12 for RHEL 9 x86_64
- Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9 ppc64le
- Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9 s390x
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8 s390x
- Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9 aarch64
- Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8 aarch64
Fixes
- BZ - 2150074 - CVE-2022-46149 capnproto: out of bounds read when handling a list of lists.
- OCPBUGS-9977 - Ship fix for rpm-ostree or librpm for node segfaults
References
- https://access.redhat.com/security/updates/classification/#moderate
- https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html
Red Hat OpenShift Container Platform 4.12 for RHEL 9
SRPM
conmon-rs-0.5.1-3.rhaos4.12.git.el9.src.rpm
SHA-256: 02390232bf541b52128ed66c8d5c742959cfc2a67415b80e0db76e99da5a7239
x86_64
conmon-rs-0.5.1-3.rhaos4.12.git.el9.x86_64.rpm
SHA-256: a3304c147da5e89170e930b4c2ad6f6cde5faeea1576fefd57296841034dd57f
Red Hat OpenShift Container Platform 4.12 for RHEL 8
SRPM
NetworkManager-1.36.0-13.el8_6.src.rpm
SHA-256: 9f1341aed503f74ba9c58c5425019067501738f05112d53bd5388c23addc161e
conmon-rs-0.5.1-3.rhaos4.12.git.el8.src.rpm
SHA-256: 5be93aae145ff758c1ed8b6efcf47d458d5cd1abffb88e204fd57d8bcd8f8b8a
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.src.rpm
SHA-256: 572e2092c5c72474b00b0a9b7a2b1fe6d00b8a29df4f45adb10de0ff41a3ec51
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.src.rpm
SHA-256: 80b22ab17aaa8a2d6816ea081556c0bef606b409e643df5f145fe718241de45b
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.src.rpm
SHA-256: c98bc5bc4264d13d82d098df68999231d523e92b466159bc776e5803acc988bd
x86_64
NetworkManager-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 2a443177ab17167497d83601ba6735016cc7de077b2b68097b09a2d52b887e93
NetworkManager-adsl-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 1b994ba9a94071ededa2904fa20fdfd4e0fc15504cc77c3a60704b1cd5a9dd69
NetworkManager-adsl-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 3e0b66db7c6d95321b598b37c50522e2431b4bb5b0bded1c8f19ae0d4ef22bb9
NetworkManager-bluetooth-1.36.0-13.el8_6.x86_64.rpm
SHA-256: fae865836be58b69ef2c06178e44eb3ec8f8978a10d69b1224f91130cf6a76ea
NetworkManager-bluetooth-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: e66ce1917febc9bc9bc7bb6f57cd24807b644c41f2bded8762d572bfa80a954c
NetworkManager-cloud-setup-1.36.0-13.el8_6.x86_64.rpm
SHA-256: e349a99031ad6c87cbb70a4334d7199ccdc79f84daadb225906af2444bf68ea8
NetworkManager-cloud-setup-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: ca8313aa7bb0a5daf50389cf9a2dd4fccb9b4a47fc603eca55218d1e5654d638
NetworkManager-config-connectivity-redhat-1.36.0-13.el8_6.noarch.rpm
SHA-256: 91d730af5b411b03f7e9a35b3512bfef95bef3c53d01b0d60fabb782680d184a
NetworkManager-config-server-1.36.0-13.el8_6.noarch.rpm
SHA-256: fdba5375d4257add6f7282e7fba50b508265d8db70ac10610ec2eb08188ec701
NetworkManager-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 1d8d641688046288a5965ee9bfa2446f95dd6ea85069e546ba380578f4f6af2e
NetworkManager-debugsource-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 75a81708caeeb201665f54ab093a7f2a984a148e6daa9e6e093ddb1419e3db68
NetworkManager-dispatcher-routing-rules-1.36.0-13.el8_6.noarch.rpm
SHA-256: 89e7d0bdd265eb8c75ec28dd6a86384c4779773935d7c7c63852a10a9f83b6cc
NetworkManager-libnm-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 948f269cd3a26fb44cc8af1178bc7a91d816ee926a2a5f8e91003788bcb5a49a
NetworkManager-libnm-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 8a666ecd980a3d70e571eb623ae11e084474427c72e96d911be08f4634feb3d0
NetworkManager-libnm-devel-1.36.0-13.el8_6.x86_64.rpm
SHA-256: f264424766a38ff7fd76ab05b2d8911c8b8e49e52b74611246c2c9062b707497
NetworkManager-ovs-1.36.0-13.el8_6.x86_64.rpm
SHA-256: d14c68f9ba0f8625d41f7e11c3521f7365765a2978b4a83fba8bbc4a7b236db0
NetworkManager-ovs-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 5259f5a6ede9956bd344fe2936a3a47b938456a3fa5ebd098d8cf944db6a8a05
NetworkManager-ppp-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 64a6465fa575b9fcd0fe03f7a353b8db7f9063d2af3bdb36b6de782699a17e13
NetworkManager-ppp-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 9e458e71fe1f719c6fdfc7a15d66be65de4ddd2726d11ea44b9acd39bc053fcc
NetworkManager-team-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 9cd49dec2e1009f63e54a69ba331ae971b219f79933f01386f41e26b4c4b3057
NetworkManager-team-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 4c4d39a3721d66b6d87dda9eae2a703dac7d8914f6a073adde7cce46693b3ae9
NetworkManager-tui-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 564573ba623cd28a8ce5c1b937762af6125d92abdb44f3873242c35c1e8815ad
NetworkManager-tui-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: bdc32603feba9c838d691b1a5a9799dcfe569293bf7af2e1f014aa798ba59e14
NetworkManager-wifi-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 15f9c8bb9609a2a6b8ce38329a6cb1885a5e6931804ce6bcb871083f6d160a73
NetworkManager-wifi-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 82931c799ef388777bf6f5b3d8f554ff1848beac47be25f032e86352bc006ff4
NetworkManager-wwan-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 49c0ff0f04740e37d53dc22cc05c16e8219b4f9afe465af74d655109280f1c41
NetworkManager-wwan-debuginfo-1.36.0-13.el8_6.x86_64.rpm
SHA-256: 801403f9cafdeebb21759bcf7e66cd4aad38493a815d2fbb4c751fab30823f65
conmon-rs-0.5.1-3.rhaos4.12.git.el8.x86_64.rpm
SHA-256: f89b10448596b8f01c0d6e0d0fcba24b323d984285ada56e3718be6328f10e9e
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: f7184417fd4476c7983432962420de5a45d5e8cd6b54d43d5efbaf12ed402116
openshift-ansible-test-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: 07c7ac5c06b7957df302d550f9397abfe75e58263293e35c327cc2783ccaad3a
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.noarch.rpm
SHA-256: 6d3daf61ac9f278fdd0168fb7fd80a8a4e744fc9304ccd70afc8f66e98bf4ee7
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: ac7e956e3eface0c286e72220cc9ecc6152d5887eca3f05d24ef196422e9eef1
rpm-ostree-debuginfo-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: 93fba745d23656a5f28564e4ed6e8640626816144861fdb050accc6cd8c47fe3
rpm-ostree-debugsource-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: 15a1c058916ed443308cbd8eb0ec3d9ac5aa4da16eddf310066e1c6ae50c6ce2
rpm-ostree-devel-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: eb90395ae4e38206325bd957bee20ba5957d7ca7fbd7b216641d49eacc1540b6
rpm-ostree-libs-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: 42c9ce666913baf0f611e269d28db663ac3000b8b4cb0d6c91b09d7611896bb5
rpm-ostree-libs-debuginfo-2022.10.115.g15eba7b1-2.el8_8.x86_64.rpm
SHA-256: 4f33631a960d8d76254e798e288105db5506e190b20e6b4f2e30ffaf34e14550
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9
SRPM
conmon-rs-0.5.1-3.rhaos4.12.git.el9.src.rpm
SHA-256: 02390232bf541b52128ed66c8d5c742959cfc2a67415b80e0db76e99da5a7239
ppc64le
conmon-rs-0.5.1-3.rhaos4.12.git.el9.ppc64le.rpm
SHA-256: 6a89d29c20932b4021b1d43b99591ff53a509f364e2d1fd66c70373286742d5f
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8
SRPM
NetworkManager-1.36.0-13.el8_6.src.rpm
SHA-256: 9f1341aed503f74ba9c58c5425019067501738f05112d53bd5388c23addc161e
conmon-rs-0.5.1-3.rhaos4.12.git.el8.src.rpm
SHA-256: 5be93aae145ff758c1ed8b6efcf47d458d5cd1abffb88e204fd57d8bcd8f8b8a
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.src.rpm
SHA-256: 572e2092c5c72474b00b0a9b7a2b1fe6d00b8a29df4f45adb10de0ff41a3ec51
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.src.rpm
SHA-256: 80b22ab17aaa8a2d6816ea081556c0bef606b409e643df5f145fe718241de45b
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.src.rpm
SHA-256: c98bc5bc4264d13d82d098df68999231d523e92b466159bc776e5803acc988bd
ppc64le
NetworkManager-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: bf883efab83485141d3aa891e2a1ba04c53407ee8cf9634691ab0ea59bf65085
NetworkManager-adsl-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 146aba86bbe30a13354e3c6755c0bcd7d2cbe151e2f5c3c107370c62a41745c8
NetworkManager-adsl-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: e50cfeccb8881c6ee8f348ec2b0b648015a69012331b01b761a728d598279338
NetworkManager-bluetooth-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 3b2f76171ee1d3a2a0f8b3676123d49543532b09e2f8ecc4f77e3e645e49761b
NetworkManager-bluetooth-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 9ef52e900f43c51d8679dd707618643e0b422a393a830472f8452d339a699154
NetworkManager-cloud-setup-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 6438defda6b42dcda708249a8793d46dcfea7f7a8e27b8329852d7ceb9b4c5c6
NetworkManager-cloud-setup-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 1ddf27bce85a528d138398fa5b02ab7075fcbe700c6fed2ad2b386c913777487
NetworkManager-config-connectivity-redhat-1.36.0-13.el8_6.noarch.rpm
SHA-256: 91d730af5b411b03f7e9a35b3512bfef95bef3c53d01b0d60fabb782680d184a
NetworkManager-config-server-1.36.0-13.el8_6.noarch.rpm
SHA-256: fdba5375d4257add6f7282e7fba50b508265d8db70ac10610ec2eb08188ec701
NetworkManager-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 4ae351f6f713170998e682c69bed45bcee00f11620ebdd88cd3cf2a75530b81a
NetworkManager-debugsource-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 2607a89d8f73a55cde166cd71cd95bf995d37d938813fa6029c5ed92acba94be
NetworkManager-dispatcher-routing-rules-1.36.0-13.el8_6.noarch.rpm
SHA-256: 89e7d0bdd265eb8c75ec28dd6a86384c4779773935d7c7c63852a10a9f83b6cc
NetworkManager-libnm-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: d661d2c32672ad07f70c9e6e846cbb22b753579e6d9714cb8e0bb06b38c39636
NetworkManager-libnm-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 73eea21997074267d6726b2355f86b2d1b9ee30f955ffa9335a343df49fb3252
NetworkManager-libnm-devel-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 1d80f263640c0756efb7427fb2ff02afb91d42479f545e3d20d6ff4c50862d83
NetworkManager-ovs-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: a85010c47e817e55255b123721ae2bd0ae0bec53bf7ee1c25c11b16557c58082
NetworkManager-ovs-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: ce90d1b32701c168be99c3f40921850d0963ad806a1cfd59a73c4a265dd5fdfb
NetworkManager-ppp-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: acc3b7f0536a28628cbfefc6dae355947f1447e37738d8b99512432fc5b39b35
NetworkManager-ppp-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 46bd60904ee852f710982b232118ddcd62f484cecac6031b0ab7cf63a1536356
NetworkManager-team-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 2e21ee1b122d7c446e04b8f27ef5ca0132365e5f57647ab61d18c20b9160dd77
NetworkManager-team-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 736fbcf11eb11d0ac3896ea89a8204640d3631c495e5caba53afa95d5319adcb
NetworkManager-tui-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 92fea9f7ed94a04ba529e769c1af436bb6ea6e8a68a2d4aa3ac8f6ca70568bbb
NetworkManager-tui-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: f11f41036b44039c00179e55352d1f5cbaaad359934ccf833a012dc752987950
NetworkManager-wifi-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 2c314104239ee4150459b79fd347240cf5fed09910e880b575f2fb9f147c55f6
NetworkManager-wifi-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: e185c8e5bcfa4857d97cc5ef4a204df49f4022e5d91e6a6fac4cdaa399914f48
NetworkManager-wwan-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 941ad1b3d4c80208e2abf21a1d2ab8240de7316d65ab149825ea825783d3a53e
NetworkManager-wwan-debuginfo-1.36.0-13.el8_6.ppc64le.rpm
SHA-256: 9beaa9d0a666c512c0060528b37ef26fb196e9fc8ec59eb283d12fdada8cd776
conmon-rs-0.5.1-3.rhaos4.12.git.el8.ppc64le.rpm
SHA-256: 609e096dcf296d75907de17cd2ab1c842a65abda642104da5f284ab3ae6fbc04
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: f7184417fd4476c7983432962420de5a45d5e8cd6b54d43d5efbaf12ed402116
openshift-ansible-test-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: 07c7ac5c06b7957df302d550f9397abfe75e58263293e35c327cc2783ccaad3a
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.noarch.rpm
SHA-256: 6d3daf61ac9f278fdd0168fb7fd80a8a4e744fc9304ccd70afc8f66e98bf4ee7
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: 7f9aa19f4ada29528b129aa3356443fe8b79de2965c7041834079b79260051e6
rpm-ostree-debuginfo-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: e0216538e75c7f59d087b565bdf5f262ca973cd7a362c5e9e2a011c991c1554d
rpm-ostree-debugsource-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: 793d2ff9c1684ba0f4e10bd37ea160068a27d9dc5794834fa1b7418b233d7305
rpm-ostree-devel-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: 3badcd5c9f9d082ccb2ba9b9cd8f71f122c70102f4ef54244e9d2155a3e9185f
rpm-ostree-libs-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: 0673b4543669c63bdf17d375dfb0024d21d6f95e1ae926a078d433896afb19f9
rpm-ostree-libs-debuginfo-2022.10.115.g15eba7b1-2.el8_8.ppc64le.rpm
SHA-256: e45cf21ef75233e677e9e451aca2afc687a76b27536d6ca83cf5d2c82f0328f0
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9
SRPM
conmon-rs-0.5.1-3.rhaos4.12.git.el9.src.rpm
SHA-256: 02390232bf541b52128ed66c8d5c742959cfc2a67415b80e0db76e99da5a7239
s390x
conmon-rs-0.5.1-3.rhaos4.12.git.el9.s390x.rpm
SHA-256: 30af1f381006d778eba73b653eeefa224e82f8fba401c2213b942318cb79dfc4
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8
SRPM
NetworkManager-1.36.0-13.el8_6.src.rpm
SHA-256: 9f1341aed503f74ba9c58c5425019067501738f05112d53bd5388c23addc161e
conmon-rs-0.5.1-3.rhaos4.12.git.el8.src.rpm
SHA-256: 5be93aae145ff758c1ed8b6efcf47d458d5cd1abffb88e204fd57d8bcd8f8b8a
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.src.rpm
SHA-256: 572e2092c5c72474b00b0a9b7a2b1fe6d00b8a29df4f45adb10de0ff41a3ec51
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.src.rpm
SHA-256: 80b22ab17aaa8a2d6816ea081556c0bef606b409e643df5f145fe718241de45b
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.src.rpm
SHA-256: c98bc5bc4264d13d82d098df68999231d523e92b466159bc776e5803acc988bd
s390x
NetworkManager-1.36.0-13.el8_6.s390x.rpm
SHA-256: da5b8fee0b9864d505661fb012f07f40e216e06c9b2508b62f9d8cf92124dfa6
NetworkManager-adsl-1.36.0-13.el8_6.s390x.rpm
SHA-256: fcfbcfb56f3e08bf0f9b8ea0dcce9ffd592eae5fcbecbc848db744d69320b69a
NetworkManager-adsl-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 73f6bb67831798acc3b7b543a8f86f792642d96e45cde799d1b671655805dd5f
NetworkManager-bluetooth-1.36.0-13.el8_6.s390x.rpm
SHA-256: 5c4bdad6732c13375b4bd3510a0b598aee1221a9ad92ea566d37ceca7e319644
NetworkManager-bluetooth-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 375b8541848023b11ec5643cc704a634175ed646fceb862629bf9f704275b0c8
NetworkManager-cloud-setup-1.36.0-13.el8_6.s390x.rpm
SHA-256: e1f9eefc41e7b4454dfbbab8268d5b0cd085f844dd31b37bceed47d53ca5e736
NetworkManager-cloud-setup-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 62a866ddf1be66baa8418cb1a0675e03e1b4d151e8323321fb94055728883772
NetworkManager-config-connectivity-redhat-1.36.0-13.el8_6.noarch.rpm
SHA-256: 91d730af5b411b03f7e9a35b3512bfef95bef3c53d01b0d60fabb782680d184a
NetworkManager-config-server-1.36.0-13.el8_6.noarch.rpm
SHA-256: fdba5375d4257add6f7282e7fba50b508265d8db70ac10610ec2eb08188ec701
NetworkManager-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: e0b4f8f9715bddf64e8934ad7fddcf0686ca12aec0403ba28fb730c19f3041c6
NetworkManager-debugsource-1.36.0-13.el8_6.s390x.rpm
SHA-256: fd83d686297b3edcf8d7e107c179179e2e1474f70ca9ebeae92d06af14893267
NetworkManager-dispatcher-routing-rules-1.36.0-13.el8_6.noarch.rpm
SHA-256: 89e7d0bdd265eb8c75ec28dd6a86384c4779773935d7c7c63852a10a9f83b6cc
NetworkManager-libnm-1.36.0-13.el8_6.s390x.rpm
SHA-256: 530154ba4fbb4ad0779374b111ff8002e48aa8e36f652cd8f97171bf00d3d215
NetworkManager-libnm-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 18a7d3220d48dd956995f45d73a80b8603a973ce8310487a26a435f02c69dc91
NetworkManager-libnm-devel-1.36.0-13.el8_6.s390x.rpm
SHA-256: 20405d7eef82f6d58cc57789d5fc9db8da57f3acfccf3085f66aacd1c2e1707b
NetworkManager-ovs-1.36.0-13.el8_6.s390x.rpm
SHA-256: 9c7015a6073519d203e3ac1082be2680d535032866c117ef6b31182f39818c67
NetworkManager-ovs-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: d60f75db7ddfe6d22febde1ba6b7720c4d6014c356f7cfa3ddc5de0ad6bb1860
NetworkManager-ppp-1.36.0-13.el8_6.s390x.rpm
SHA-256: d132fab4d8927055d036386a8f61adc1f76ea6644f54df4c4a7b92ec669d8267
NetworkManager-ppp-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 573a7e6dcb1e5ec6b5ff1059be71e6455beb0053a31e6386763a9ee8beecbec4
NetworkManager-team-1.36.0-13.el8_6.s390x.rpm
SHA-256: e20fbf4fa96373f5d578a5a1dfe9b5f0c7e352cd5fea548dda27d3841e316ded
NetworkManager-team-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: adc3260df54f491076bb6683e69c96e0680bec48c1b3a7071f9e1d3edc29f184
NetworkManager-tui-1.36.0-13.el8_6.s390x.rpm
SHA-256: b7932eba9a945f3dd12f7b5e3ff75e6c06f546216c7adfd6edda852d5a84653b
NetworkManager-tui-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: bd0de0d1e32367beef811aec667473de874c6278977b8194e053f73703d5ac71
NetworkManager-wifi-1.36.0-13.el8_6.s390x.rpm
SHA-256: 48373de4b525b24f280a6267040892966aa109949c6abeb89538b7c790344c07
NetworkManager-wifi-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 97e8a5771796bb1663c0c5dee0cd7d864dddc2eca58fbd5ff7279a2ed199d7f5
NetworkManager-wwan-1.36.0-13.el8_6.s390x.rpm
SHA-256: 4524f08bb6e6a93c56a1c7be3053e1cad541d098f64ddb497db730335ca47a74
NetworkManager-wwan-debuginfo-1.36.0-13.el8_6.s390x.rpm
SHA-256: 8477295b38a67138c8516793ec22a1cb0ab21db71f47f941f1e5b66aef8913a7
conmon-rs-0.5.1-3.rhaos4.12.git.el8.s390x.rpm
SHA-256: 43ff05865888358c6f01f5cc3f21f51c3c8c338ad217e4e34d85c057b568a58b
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: f7184417fd4476c7983432962420de5a45d5e8cd6b54d43d5efbaf12ed402116
openshift-ansible-test-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: 07c7ac5c06b7957df302d550f9397abfe75e58263293e35c327cc2783ccaad3a
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.noarch.rpm
SHA-256: 6d3daf61ac9f278fdd0168fb7fd80a8a4e744fc9304ccd70afc8f66e98bf4ee7
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: 8cfd9022a1c30904799184e7ad308adfe744d2c57c8db6497200ac960a13186a
rpm-ostree-debuginfo-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: 73a4fc515e5c066352fa1d0bc45777df06968385d825df6d3fe811bb92942ddc
rpm-ostree-debugsource-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: c4d4a7bdb5071c56b6e941abd6c86b1a03d7e5a11bd54f64fc49214e151135d2
rpm-ostree-devel-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: 2690943714c32f611c504ca903beed03929d644dd053761f3704d7875213ba0a
rpm-ostree-libs-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: 958ac4ec35cbcdb4a89725d3cac5fafb2f07c5aaff47cf65f035985b0d8d6ae0
rpm-ostree-libs-debuginfo-2022.10.115.g15eba7b1-2.el8_8.s390x.rpm
SHA-256: 60b559b60c51eb94e4bf71bce4b4b405b8100ba7c071f0c067f51c9b1355e96d
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9
SRPM
conmon-rs-0.5.1-3.rhaos4.12.git.el9.src.rpm
SHA-256: 02390232bf541b52128ed66c8d5c742959cfc2a67415b80e0db76e99da5a7239
aarch64
conmon-rs-0.5.1-3.rhaos4.12.git.el9.aarch64.rpm
SHA-256: 461539021517ecdf9502ca802cd47e4fac74d946f9d864e6942661c8793bf47c
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8
SRPM
NetworkManager-1.36.0-13.el8_6.src.rpm
SHA-256: 9f1341aed503f74ba9c58c5425019067501738f05112d53bd5388c23addc161e
conmon-rs-0.5.1-3.rhaos4.12.git.el8.src.rpm
SHA-256: 5be93aae145ff758c1ed8b6efcf47d458d5cd1abffb88e204fd57d8bcd8f8b8a
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.src.rpm
SHA-256: 572e2092c5c72474b00b0a9b7a2b1fe6d00b8a29df4f45adb10de0ff41a3ec51
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.src.rpm
SHA-256: 80b22ab17aaa8a2d6816ea081556c0bef606b409e643df5f145fe718241de45b
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.src.rpm
SHA-256: c98bc5bc4264d13d82d098df68999231d523e92b466159bc776e5803acc988bd
aarch64
NetworkManager-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 046cacca850db2719a56386275bb016f5a93f7e3bdf08a29f9c79a595c4522bc
NetworkManager-adsl-1.36.0-13.el8_6.aarch64.rpm
SHA-256: e5ddcba7683ff3b30e48293e75517748fec1308cad332961411f84582af0c428
NetworkManager-adsl-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: c05e794ebadbc07a8a8fa0a6e3b54d79f7f99643fef13796487d31b1e7808ec4
NetworkManager-bluetooth-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 94179b681d1fd978a32bb35f0977364aa9e0b03874250e167f0a41d31a81b827
NetworkManager-bluetooth-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 6c0a716b92958701587973f4bb59527c5b47d758f0a72154cef523fb94e819cf
NetworkManager-cloud-setup-1.36.0-13.el8_6.aarch64.rpm
SHA-256: c6c80d2784356d874ed28e75acedba64cb39fb61c546ae12e0282953551cfbd4
NetworkManager-cloud-setup-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: d56c62c29448d4dc647d4b8a4c8b8193257512bf7e2ebeabce6b5618c87c546e
NetworkManager-config-connectivity-redhat-1.36.0-13.el8_6.noarch.rpm
SHA-256: 91d730af5b411b03f7e9a35b3512bfef95bef3c53d01b0d60fabb782680d184a
NetworkManager-config-server-1.36.0-13.el8_6.noarch.rpm
SHA-256: fdba5375d4257add6f7282e7fba50b508265d8db70ac10610ec2eb08188ec701
NetworkManager-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: d8aa2d14ccc06ae1229a424ac136ad5376aad6cfc20167763181a4f8713a1d2b
NetworkManager-debugsource-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 69458dee1e2b356da98c3b1d19f5a653c26e8b64df33aaaeb981ad80998ab161
NetworkManager-dispatcher-routing-rules-1.36.0-13.el8_6.noarch.rpm
SHA-256: 89e7d0bdd265eb8c75ec28dd6a86384c4779773935d7c7c63852a10a9f83b6cc
NetworkManager-libnm-1.36.0-13.el8_6.aarch64.rpm
SHA-256: d4dd08ab6e50de7c8f79fc16c3465eb899f07d6bcd19684c275de4cceed9531a
NetworkManager-libnm-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: ccc0336e12dd969bbf6cb46905e3980a936dbf5e5feb2dd6cd9e7c344849c9bb
NetworkManager-libnm-devel-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 9e611d7cf8c84d5fd4bd616fc0a154551c4fc0f2212b25b77c94a7e2c0fffa80
NetworkManager-ovs-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 4341187e432b41e7bd3d615bdd16dd4fa77697967eeca7b9c3e06feb24149947
NetworkManager-ovs-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 2694d485452aacdd8a3e50f8c6472992329f9b831023649653fac2997685c56b
NetworkManager-ppp-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 728fd770cda41eb7d7a9f993e7687c23ba8b70a61d1529ef75cd7cf8b39090df
NetworkManager-ppp-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 750ad22793b4a0f150cb541ed72ca384a14b72952fae276bd7b9ccb4b3bdc2ff
NetworkManager-team-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 8c8b64fa170ca6ad6e5cfd9bedde0197e6bcec24ecdc09db0de21ab129c582f1
NetworkManager-team-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 0c650cf8222cd72861c5712ff30ea98dc1b8cb8ba45cd46d0e9513f9c01134e8
NetworkManager-tui-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 63c2546ec36505f9f66ec3f087ab7a5d8761b666a75b7c9bb245b56aef4db067
NetworkManager-tui-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 66c6f59f4bb3e2f816d8ddae1d457640c965fa7c1b19907860977cb9a77fc2de
NetworkManager-wifi-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 211e76b28605f0dd76fb94c25b1371fe18b169e685ee3c6f9d1eb49627779c07
NetworkManager-wifi-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 9db18c5cf3ae8e4297fd9862c0b5c0947c5c5ceb54f480eb944756d79f3610b9
NetworkManager-wwan-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 644a02951be0754c5e7c2fc9016150eb70c906d54a733ed9472f888597f2c003
NetworkManager-wwan-debuginfo-1.36.0-13.el8_6.aarch64.rpm
SHA-256: 65a283fb31a77cbffea85188f0fcc47b73058dc850e92bf656310781af0377e4
conmon-rs-0.5.1-3.rhaos4.12.git.el8.aarch64.rpm
SHA-256: 605d5b09ce3e6679dea14b14570b2f8433dc4a5db2b3e49ff07f3278f3613f25
openshift-ansible-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: f7184417fd4476c7983432962420de5a45d5e8cd6b54d43d5efbaf12ed402116
openshift-ansible-test-4.12.0-202303211955.p0.gab53575.assembly.stream.el8.noarch.rpm
SHA-256: 07c7ac5c06b7957df302d550f9397abfe75e58263293e35c327cc2783ccaad3a
openshift4-aws-iso-4.12.0-202303211342.p0.ge6f12ae.assembly.stream.el8.noarch.rpm
SHA-256: 6d3daf61ac9f278fdd0168fb7fd80a8a4e744fc9304ccd70afc8f66e98bf4ee7
rpm-ostree-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: 0a9f05254bbb92c6553fcd4decfd3029067b308ac2edd618205af85d84176150
rpm-ostree-debuginfo-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: 39b999a18205720dc79b039b53a1aae290daae8b3920f06b81fe6025c04ea6ef
rpm-ostree-debugsource-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: ed291f865f9de6ea023f5e0c8d8660cba0fa385aece2745859ea35519cb11405
rpm-ostree-devel-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: 395bc18d04c02377193014dbed52defd13fb84a484243308145f53ee5407645f
rpm-ostree-libs-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: 29a44a07c5394266fa9d2b409aa26575db60740b4d623216f32b444803ff5a4a
rpm-ostree-libs-debuginfo-2022.10.115.g15eba7b1-2.el8_8.aarch64.rpm
SHA-256: e81b28d677864013c317e4b73b8cbb8b32fc04165a6fb81289bdbb84d4d544fa
The Red Hat security contact is [email protected]. More contact details at https://access.redhat.com/security/team/contact/.
Related news
The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the consumer to read out-of-bounds memory. This could trigger a process crash in the consumer, or in some cases could allow exfiltration of private in-memory data. Impact ====== - Remotely segfault a peer by sending it a malicious message, if the victim performs certain actions on a list-of-pointer type. - Possible exfiltration of memory, if the victim performs additional certain actions on a list-of-pointer type. - To be vulnerable, an application must perform a specific sequence of actions, described below. At present, **we are not aware of any vulnerable application**, but we advise updating regardless. Fixed in ======== Unfortunately, the bug is present in inlined code, therefore the fix will...
Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out-of-bounds read due to logic error handling list-of-list. This issue may lead someone to remotely segfault a peer by sending it a malicious message, if the victim performs certain actions on a list-of-pointer type. Exfiltration of memory is possible if the victim performs additional certain actions on a list-of-pointer type. To be vulnerable, an application must perform a specific sequence of actions, described in the GitHub Security Advisory. The bug is present in inlined code, therefore the fix will require rebuilding dependent applications. Cap'n Proto has C++ fixes available in versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3. The `capnp` Rust crate has fixes available in versions 0.13.7, 0.14.11, and 0.15.2.