RHSA-2022:4668MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.10.1 Images security and bug fix update

Published
May 18, 2022
Last Modified
October 22, 2026

🔗 CVE IDs covered (3)

CVE-2021-36221 →CVE-2021-41190 →CVE-2022-21698 →

📋 Description

CVE-2021-36221 — golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-41190 — opencontainers: OCI manifest and index parsing confusion CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter

🎯 Affected products3

  • CNV 4.10 for RHEL 8
  • container-native-virtualization/hostpath-csi-driver-rhel8@sha256:e77159a8bbe92d5b54fb268f6b53d56f905ac6bbb10cd678d10db9609dfdf2fe_amd64 as a component of CNV 4.10 for RHEL 8
  • container-native-virtualization/hostpath-csi-driver@sha256:e77159a8bbe92d5b54fb268f6b53d56f905ac6bbb10cd678d10db9609dfdf2fe_amd64 as a component of CNV 4.10 for RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (42)