RHBA-2024:4781 - Bug Fix Advisory

Topic

An updated OpenShift Security Profiles Operator image that fixes various bugs is now available for the Red Hat OpenShift Enterprise 4 catalog.

Description

The OpenShift Security Profiles Operator v0.8.4 is now available. See the documentation for bug fix information:

https://docs.openshift.com/container-platform/4.16/security/security_profiles_operator/spo-release-notes.html

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.13 for RHEL 9 x86_64
• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64

Fixes

• OCPBUGS-37303 - Annotations missing in the operator CSV file for bundle image security-profiles-operator-bundle-container-0.8.4-2

CVEs

• CVE-2021-43618
• CVE-2022-36227
• CVE-2022-48554
• CVE-2023-2602
• CVE-2023-2603
• CVE-2023-2953
• CVE-2023-2975
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-4641
• CVE-2023-5678
• CVE-2023-6004
• CVE-2023-6129
• CVE-2023-6237
• CVE-2023-6918
• CVE-2023-7008
• CVE-2023-7104
• CVE-2023-22652
• CVE-2023-29491
• CVE-2023-30079
• CVE-2023-36054
• CVE-2023-39975
• CVE-2024-0727
• CVE-2024-2961
• CVE-2024-22365
• CVE-2024-25062
• CVE-2024-28182
• CVE-2024-28834
• CVE-2024-28835
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602

References

(none)