浜戝畨鍏ㄦ棩鎶�210727锛氱孩甯戒簯璁＄畻搴旂敤骞冲彴鍙戠幇瓒婄晫鍐欏叆婕忔礊锛岄渶瑕佸敖蹇�崌绾�

Red Hat OpenShift Container Platform(绾㈠附OpenShift瀹瑰櫒骞冲彴)鏄�孩甯斤紙Red Hat锛夊叕鍙哥殑涓€濂楀彲甯�姪浼佷笟鍦ㄧ墿鐞嗐€佽櫄鎷熷拰鍏�叡浜戝熀纭€鏋舵浜戝瀯涔嬮棿寮€鍙戙€侀儴缃插拰绠＄悊鐜版湁鍩轰簬瀹瑰櫒鐨勫簲鐢ㄧ▼搴忕殑搴旂敤骞冲彴銆傚畠閲囩敤浼佷笟绾�ubernetes鎶€鏈�瀯寤�,涓撲负鍐呴儴閮ㄧ讲鎴栫�鏈変簯閮ㄧ讲鑰岃�璁�,鍙�互瀹炵幇鍏ㄥ爢鏍堣嚜鍔畨鍏ㄥ寲杩愮淮锛屼互绠＄悊娣峰悎浜戝拰澶氫簯閮ㄧ讲銆�

7鏈�26鏃�,RedHat鍙戝竷浜嗗畨鍏ㄦ洿鏂帮紝淇��浜嗙孩甯戒簯璁＄畻搴旂敤骞冲彴(OpenShift)瑙ｅ喅鏂规�鍙戠幇鐨勮秺鐣屽啓鍏ョ瓑閲嶈�婕忔礊銆備互ㄦ棩涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇︽儏

鏉ユ簮锛歨ttps://access.redhat.com/errata/RHSA-2021:2763

1.CVE-2021-33909 CVSS璇勫垎锛�7.0 涓ラ噸绋嬪害鎶�锛氶珮

鍦ㄦ枃浠剁郴缁熷眰鐨� Linux鍐呮牳鐨剆eq_file涓�彂鐜颁簡瓒婄晫鍐欏叆婕忔礊銆傝�婕忔礊鍏佽�鍏锋湁鐢ㄦ埛鏉冮檺鐨勬湰鍦版敾鍑昏€呰�闂�秺鐣屽唴瀛橈紝浠庤€屽�鑷寸郴缁熷穿婧冩垨鍐呴儴鍐呮牳淇℃21伅娉勬紡銆傝�闂��鏄�敱浜庡湪鎵ц�鎿嶄綔涔嬪墠鏈�獙璇乻ize_t-to-int杞�崲閫犳垚鐨勩€傛�婕忔礊鐨勬渶澶у▉鑳佹槸鏁版嵁瀹屾暣鎬с€佹満瀵嗘€у拰绯荤粺鍙�敤鎬с€�

2.CVE-2021-3391007 CVSS璇勫垎锛�5.5 涓ラ噸绋嬪害锛氶珮

鍦╯ystemd涓�瓨鍦ㄦ紡娲炪€傚湪鍑芥暟unit_name_path_escape涓�娇鐢ㄥぇ灏忎笉鍙楁帶鍒剁殑alloca鍑芥暟鍏佽�鏈�湴鏀诲嚮鑰咃紙鑳藉�鍦ㄥ緢27闀跨殑璺�緞涓婃寕杞芥枃浠剁郴缁燂級閫氳繃鍦ㄥ爢鏍堜腑鍒嗛厤闈炲父澶х殑绌洪棿鏉ヤ娇 systemd 鍜屾暣涓�郴缁熷穿婧冦€傛�婕忔礊鐨勬渶澶у▉鑳佹槸绯荤粺鍙�敤鎬с€�

鍙楀奖鍝嶄骇鍝佸拰鐗堟湰

Red Hat Op锛氱enShift Container Platform 4.7 for RHEL 8 x86_64

Red Hat OpenShift Container Platform 4.7 for RHEL 7 x86_64

Red Hat OpenShi孩甯ft Container Platform for Power 4.7 for RHEL 8 ppc64le

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8戒簯 s390x

瑙ｅ喅鏂规�

瀵逛簬 OpenShift Container Platform 4.7锛岃�鍙傞槄浠ヤ笅鏂囨。锛岃�鏂囨。

灏嗗緢蹇�拡瀵规�鐗堟湰杩涜�鏇存柊锛屼互鑾峰彇鏈夊叧濡備綍

鍗囩骇闆嗙兢鍜屽畬鍏ㄥ簲鐢璁＄ㄦ�寮傛�鍕樿�鏇存柊鐨勯噸瑕佽�鏄庯細

https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes畻搴.html

鏈夊叧濡備綍璁块棶姝ゅ唴瀹圭殑璇︾粏淇℃伅锛岃�璁块棶

https://docs.openshift.com/container-platform/4.7/updating/updating-clus旂敤ter-cli.html

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗囩骇璇疯�闂�畼缃戯細

https://access.redhat.com/security/security-updates/#/security-advis骞冲ories