RHSA-2022:1660 - Security Advisory
Moderate: Red Hat OpenShift support for Windows Containers 2.0.5 [security update]
Security Advisory: Moderate
The components for Red Hat OpenShift support for Windows Containers 2.0.5 are now available. This product release includes a moderate security update for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
Red Hat OpenShift support for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers.
- containernetworking-cni: Arbitrary path injection via type field in CNI configuration (CVE-2021-20206)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For Windows Machine Config Operator upgrades, see the following documentation: https://docs.openshift.com/container-platform/latest/windows_containers/windows-node-upgrades.html
- Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
- BZ - 1919391 - CVE-2021-20206 containernetworking-cni: Arbitrary path injection via type field in CNI configuration
- WINC-756 - Windows Container Support for Red Hat OpenShift 2.0.5 release
Red Hat OpenShift Container Platform 4.7 for RHEL 8
The Red Hat security contact is firstname.lastname@example.org. More contact details at https://access.redhat.com/security/team/contact/.