RHBA-2024:6709 - Bug Fix Advisory

Topic

Red Hat OpenShift sandbox containers 1.7.0 is now available.

Description

OpenShift sandboxed containers support for OpenShift Container Platform
provides users with built-in support for running Kata containers as an
additional, optional runtime.

This advisory contains an update for OpenShift sandboxed containers with bug fixes and container upgrades.

Space precludes documenting all of the updates to OpenShift sandboxed
containers in this advisory. See the Release Notes documentation,
which will be updated shortly for this release, for details about these
changes:

https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.7/html/release_notes/index

Solution

Before applying this update, make sure all previously
released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64

Fixes

• KATA-3233 - 0.0.1-18 on AWS is not creating ssh-key-secret for peer-pods
• KATA-3291 - Unable to unpack container image
• KATA-3295 - OSC operator upgrade doesn't update CRI-O and Kata config files
• KATA-3235 - CVP Test: operator-metadata-preparation-bundle-image: Warning

CVEs

• CVE-2023-2953
• CVE-2024-2398
• CVE-2024-3651
• CVE-2024-4418
• CVE-2024-6345
• CVE-2024-6387
• CVE-2024-6409
• CVE-2024-6923
• CVE-2024-28182
• CVE-2024-32002
• CVE-2024-32004
• CVE-2024-32020
• CVE-2024-32021
• CVE-2024-32465
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891

References

(none)