RHSA-2022:5875MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.26 security update

Published
August 9, 2022
Last Modified
August 24, 2026

🔗 CVE IDs covered (4)

CVE-2022-28327 →CVE-2022-30631 →CVE-2022-23773 →CVE-2022-23806 →

📋 Description

CVE-2022-23773 — golang: cmd/go: misinterpretation of branch names can lead to incorrect access control CVE-2022-23806 — golang: crypto/elliptic: IsOnCurve returns true for invalid field elements CVE-2022-28327 — golang: crypto/elliptic: panic caused by oversized scalar CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:1126931b230ac684a4874e46c823baaa7d28f8439f288b9bf85af85ce6083111_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:712dba626864745a52cefcec0aa8386a467169563f33756ef554e5985b17ae3d_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:739fbbf50ce1cd34c567276f2c144c082a0d5a583591996be2ef940b7c681138_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:946f1f2fb3a6e48e4932f9859bb026510fa96716b0efac184729b8f9c7473090_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:5d2648f9eaef5471b89cac5b60eae7844a7d18343d8f22250f4cf08b493a6a5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:76cc8f13389474f76250aeccb6d5379ec4fc77befdc5529df1878f537117faa2_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:f8e641d11337b69c64ea31fee3569627f0af1c831a87c819139ad54737eb6094_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:fc2100ad6e334a715e9d24ce7f341c8f1dc6cae66ed70b3dd88c53264e65d2a5_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:124ff310bc5319e10c72c9e7afe870cd47dd6177c9939ba6b665b4b154736040_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:7ae14bb14689deb0d43cecf26fb777706ecc90ccfaf019077a84f982d44eccdd_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:b04c68bbbb95a7e1c6ce534e5a50d14428ca6abd4ce1e111f3d2548ce4dd6a5c_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:fb403cebee7478b119b63f788115f72b3c1292bb422b97c1e5f041b8ebc035da_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/oc-mirror-plugin-rhel8@sha256:02cc44ada523d5f2d29459aa3b97c638d0a87a556327f7cabba4ed0bbc37444b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:404b6bbc254fc3384ac5acade972860d9c773ad206feb820cf165bbaf615307d_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:3affa060680c1cd51d5ba0ee6e107336e50ea6ad756ff43b88ee06296612b536_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:d3f0f2c81c2607578732d768be3886b3639c2e5f4ed08626e5f078bb701d976a_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:f69b2c10c3e5ca633199de67a42d117dce9f2f6448036bf4be3dfc6b49af17f0_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:6bd548e135b814c9ed0ea85ad204f6aae8564e0f46663883e32b92e26384e484_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:79cbeda6c628858323a181506bf7fd733bef2beb4969e1ccdd4f71216bb30f15_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:470478298a68db5362e71e535f303334bcb970868b43c83885ad18fe1adea285_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:eeb534884cf73467a2fd9414ba3acc3cabb746d7697d8d58e6ce95283443788b_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:208fe0af4223f2d4effedeacca917f4e45c8e4f231e1dfc17a04d1fc8eb767bf_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:575d681c2ba87e3aecb0cda7109b8220d36be8c23471f911004962f0728cf118_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:0297a450c33959c907fc6696b39f54ae83b4c677761b030aaae35d2429c97a76_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:55a748563a522e5d84fc945ddea1aeffc1d3a10e29d688a1221b96d746c13698_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:681a83339a7dda4b05e972474dde159be1dc44dc1580e389d0a99e93ef8c323a_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-azure-cloud-node-manager-rhel8@sha256:0ec8faa816bba55a9a00a4c1c50ee9e3703e2d6298b669d23545e924923d0162_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:5c70424147060b967fbc4d952eb5405fad9391591b99f94968cd876ac8045a14_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:e82cae2a09c7dea1c9d66f7744ca7258554bd45e2664d3e51c9b438a2d3fc020_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

🔗 References (22)