RHBA-2023:0390 - Bug Fix Advisory

Topic

OpenShift sandboxed containers 1.3.2 is now available.

Description

OpenShift sandboxed containers support for OpenShift Container Platform
provides users with built-in support for running Kata containers as an
additional, optional runtime.

This advisory contains an update for OpenShift sandboxed containers with bug fixes and container updates.

Space precludes documenting all of the updates to OpenShift sandboxed
containers in this advisory. See the following Release Notes documentation,
which will be updated shortly for this release, for details about these
changes:

https://docs.openshift.com/container-platform/4.12/sandboxed_containers/sandboxed-containers-release-notes.html

Solution

Before applying this update, make sure all previously
released errata relevant to your system have been applied.

Refer to https://docs.openshift.com/container-platform/4.12/sandboxed_containers/upgrade-sandboxed-containers.html for additional information.

Affected Products

• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• KATA-1824 - OSC 1.3.1 channel-1.3 on OCP 4.10 won't start kataconfig
• KATA-1792 - Update operator-sdk to 1.23
• KATA-1814 - Update operator-sdk to 1.21
• KATA-1815 - Update operator-sdk to 1.22
• KATA-1828 - manual operator build process builds wrong content
• KATA-1835 - remove bundle.Dockerfile from operator repo
• KATA-1838 - make builds default to upstream values
• KATA-1863 - update version to 1.3.2
• KATA-1876 - add annotation for valid-subscription to operator
• KATA-1884 - Update operator-sdk to 1.24

CVEs

• CVE-2020-35525
• CVE-2020-35527
• CVE-2021-46848
• CVE-2022-1304
• CVE-2022-2509
• CVE-2022-2601
• CVE-2022-3515
• CVE-2022-3775
• CVE-2022-3787
• CVE-2022-22624
• CVE-2022-22628
• CVE-2022-22629
• CVE-2022-22662
• CVE-2022-26700
• CVE-2022-26709
• CVE-2022-26710
• CVE-2022-26716
• CVE-2022-26717
• CVE-2022-26719
• CVE-2022-30293
• CVE-2022-30698
• CVE-2022-30699
• CVE-2022-35737
• CVE-2022-37434
• CVE-2022-40303
• CVE-2022-40304
• CVE-2022-42010
• CVE-2022-42011
• CVE-2022-42012
• CVE-2022-42898
• CVE-2022-43680

References

• null