RHBA-2022:6072 - Bug Fix Advisory

Topic

OpenShift sandboxed containers 1.3.0 is now available.

Description

OpenShift sandboxed containers support for OpenShift Container Platform
provides users with built-in support for running Kata containers as an
additional, optional runtime.

This advisory contains an update for OpenShift sandboxed containers with enhancements and bug fixes.

Space precludes documenting all of the updates to OpenShift sandboxed
containers in this advisory. See the following Release Notes documentation,
which will be updated shortly for this release, for details about these
changes:

https://docs.openshift.com/container-platform/4.11/sandboxed_containers/sandboxed-containers-release-notes.html

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://docs.openshift.com/container-platform/latest/sandboxed_containers/upgrade-sandboxed-containers.html

Affected Products

• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• KATA-1373 - MCO pod using sandboxed containers scc causes it to fail
• KATA-1338 - Monitor pods restarting numerous times before stablizing
• KATA-1569 - Uninstalling the operator doesn't delete the SCC
• KATA-1653 - Dealing with existing `kata-oc` MCP during upgrade

CVEs

• CVE-2021-40528
• CVE-2022-1621
• CVE-2022-1629
• CVE-2022-22576
• CVE-2022-25313
• CVE-2022-25314
• CVE-2022-27774
• CVE-2022-27776
• CVE-2022-27782
• CVE-2022-29824

References

• https://docs.openshift.com/container-platform/4.11/sandboxed_containers/sandboxed-containers-release-notes.html
• https://docs.openshift.com/container-platform/latest/sandboxed_containers/upgrade-sandboxed-containers.html