RHSA-2022:0055MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update

Published
March 10, 2022
Last Modified
June 30, 2026

🔗 CVE IDs covered (7)

CVE-2014-3577 →CVE-2021-21684 →CVE-2021-41190 →CVE-2021-41772 →CVE-2021-44716 →CVE-2021-44717 →CVE-2022-0532 →

📋 Description

CVE-2014-3577 — CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix CVE-2021-21684 — jenkins-2-plugins/git: stored XSS vulnerability CVE-2021-41190 — opencontainers: OCI manifest and index parsing confusion CVE-2021-41772 — golang: archive/zip: Reader.Open panics on empty string CVE-2021-44716 — golang: net/http: limit growth of header canonicalization cache CVE-2021-44717 — golang: syscall: don't close fd 0 on ForkExec error CVE-2022-0532 — cri-o: pod with access to 'hostIPC' and 'hostNetwork' kernel namespace allows sysctl from the list of safe sysctls to be applied to the host

🔗 References (9)