RHSA-2022:5069HighCVSS 9.8

Red Hat Security Advisory: OpenShift Container Platform 4.11.0 bug fix and security update

Published
August 10, 2022
Last Modified
August 7, 2026

🔗 CVE IDs covered (13)

CVE-2022-29810 →CVE-2022-30323 →CVE-2021-23648 →CVE-2021-41190 →CVE-2021-44906 →CVE-2022-0235 →CVE-2022-21698 →CVE-2022-26945 →CVE-2022-30321 →CVE-2022-30322 →CVE-2021-23566 →CVE-2021-43565 →CVE-2022-27191 →

📋 Description

CVE-2021-23566 — nanoid: Information disclosure via valueOf() function CVE-2021-23648 — sanitize-url: XSS due to improper sanitization in sanitizeUrl function CVE-2021-41190 — opencontainers: OCI manifest and index parsing confusion CVE-2021-43565 — golang.org/x/crypto: empty plaintext packet causes panic CVE-2021-44906 — minimist: prototype pollution CVE-2022-0235 — node-fetch: exposure of sensitive information to an unauthorized actor CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-26945 — go-getter: command injection vulnerability CVE-2022-27191 — golang: crash in a golang.org/x/crypto/ssh server CVE-2022-29810 — go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses CVE-2022-30321 — go-getter: unsafe download (issue 1 of 3) CVE-2022-30322 — go-getter: unsafe download (issue 2 of 3) CVE-2022-30323 — go-getter: unsafe download (issue 3 of 3)

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:2912cae3175adb7b70e41632ac83ede3d4af241a937d84bfce4cd446697616c1_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:73388ce8b3aefb49cafcedac7d495f4ad0bb3596ac48db33fc4060b63670506b_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:e882c1600360ed7e62e0bd118c9ad180cafda9df2f77c7890423fcb15b4cb7b4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:f069bbbe0f9ce4699ce6923b8bde7996796227222f1e904fa70a6ea3d5cc3f0e_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:124020588a80e7d022893aea6e38e864cf853a162b3ad7b76899311923eea198_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:49c0b1ee2756b6cb3b7d9f86d6faebd612189b3a4a829287c022064994178e63_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:514e256367e8707e2c30f18a4f06fbd6c821ab9776602d2488e861f577a357d0_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:c659f3a542af6741f7e9ff5c2a0cc21a4a781a6174e59c56590b98ce3fc414cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:0361e52eb276448636f9f0ddeeb3fb738bbc5f966ed328cb828e9502d59af104_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:2d9818cd397a8479a2b9798543e66934e05f79fcf479b7c1dd31dda57befce7b_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:44d6ec5354600c25d5cbfa43e2365a0971d6d6e109bf3729e676009c7db670cf_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:bcbb90eb70297053aed9f07b99c658a66da7e068d882f85193d3b6bc1aa020b9_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:1faa1fd395aad9e416a84d313c4ab8b00eed665915e27fce38ca855806445e31_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:d086e7ee9cf5866ad8a116ae0d67f580b2c68523ce17b120a5c6c120d4133769_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:d47f42fcc17d12c9d67432afb7bbbffc66630487fdd94c834470c713e513b52b_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:f3ea833de2508a3ad2dbc166bccf97fc26857f28e6ba4160567e21744e14306e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:50b0dba5ccd887af20518042e521b897dd15ee15f3f498310e3080de883ca745_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:1eb8006f84401b75b499d00da4c6d5e626272f22947bfa55a6129018932be165_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:7f114d17dfc4b73c6b7ef6a3cd6ac95c858b93715c68d8337415d824aabe121b_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:cf0cefa3efeb3456a958abe6460cfa9b1f1bc2a5fbecc65fb8215bd6bb1fa4c6_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:d8def7241e1707b99bd445a4764477cb24c180175836fae35589fedb1ad892df_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:10a8f225a77d1aa868f9f4dbd0d849d0cac882eb945d7aaac5f8d94e9cc69f13_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:804964b98e4290fb9a1b11d00e888b7d5a5db548fec96701b175ed73ef511a0e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:d222dde66aa380f5ca681bb383ed1987ae08d356a12a939c53f296e94d3e4c41_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:e2f13c859c7be9bfc07e9b504ae43cd88a93ed86005d20c8f5bc538f75a0d68d_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:25c0218a9d620d300cd27001b35e1fb892858147865aa0ea0e46c8b4c6629b1c_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:51d89602f11aaae4b3e950f54274567d19bec74b86dad054e60ce56c893476b3_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:6d30bd752abb46f169a36b3daf0902b8f1cc02829d5e02b764f9a26652ab015e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:c7c8193f55a416709c409c49d5648636280f57f4360a20f255aa233934b4f55c_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html Workaround: The fix includes new configuration options to help limit the security exposure and have more secure defaults.

🔗 References (1398)