Red Hat Enterprise Linux Migration Toolkit for Containers: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• Medium 5.3
  CVE-2023-25173

  containerd supplementary groups are not set up properly

  containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supp…

  containerd containerd ctop containerd Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 16, 2023
• Unscored —
  CVE-2022-41724

  Panic on large handshake records in crypto/tls

  Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…

  Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023
• Unscored —
  CVE-2022-41725

  Excessive resource consumption in mime/multipart

  A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in th…

  Go standard library mime/multipart katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023

Revision history

1. 2025-11-27 #10

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2024-08-05 #9

   Neue Updates von Gentoo aufgenommen

3. 2024-01-24 #8

   Neue Updates von Amazon aufgenommen

4. 2024-01-01 #7

   Neue Updates von Red Hat aufgenommen

5. 2023-11-14 #6

   Neue Updates von Red Hat aufgenommen

6. 2023-08-09 #5

   Neue Updates von Amazon aufgenommen

7. 2023-07-17 #4

   Neue Updates von Red Hat aufgenommen

8. 2023-05-18 #3

   Neue Updates von Red Hat aufgenommen

9. 2023-05-16 #2

   Neue Updates von Red Hat aufgenommen

10. 2023-05-03 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2023:2107 vom 2023-05-03
  https://access.redhat.com/errata/RHSA-2023:2107
• Red Hat Security Advisory RHSA-2023:3083 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:3083
• Red Hat Security Advisory RHSA-2023:3167 vom 2023-05-19
  https://access.redhat.com/errata/RHSA-2023:3167
• Red Hat Security Advisory RHSA-2023:4025 vom 2023-07-18
  https://access.redhat.com/errata/RHSA-2023:4025
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2023-026 vom 2023-08-10
  https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2023-026.html
• Red Hat Security Advisory RHSA-2023:6939 vom 2023-11-15
  https://access.redhat.com/errata/RHSA-2023:6939
• Red Hat Security Advisory RHSA-2023:5006 vom 2023-12-30
  https://access.redhat.com/errata/RHSA-2023:5006
• Amazon Linux Security Advisory ALASDOCKER-2024-035 vom 2024-01-24
  https://alas.aws.amazon.com/AL2/ALASDOCKER-2024-035.html
• Gentoo Linux Security Advisory GLSA-202408-01 vom 2024-08-06
  https://security.gentoo.org/glsa/202408-01
• Rocky Linux Security Advisory RLSA-2023:6938 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:6938