RHSA-2022:6053MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.7.56 security and bug fix update

Published
August 22, 2022
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2022-30631 →

📋 Description

CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.7
  • openshift4/driver-toolkit-rhel8@sha256:98220095b2a348a2d793b71668c1b5d1f4eaca1262d7c59e813b4dc24642616e_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/driver-toolkit-rhel8@sha256:bfe0294882115863f152c6f6e3fd5f668e8bee7b5818d38d80b9b8a8c84d2390_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/driver-toolkit-rhel8@sha256:f9887ef32aa05b80db9956b8d04593ebaa8e4e2d88b1132bcf5786ecc27025fc_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/egress-router-cni-rhel8@sha256:405f53532643f4cb44c89be9028bd5d254b5205b634f4bbccc8e82b79c0352ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/egress-router-cni-rhel8@sha256:a23ad1b61841e887cb02d69b0280ec341c96230cdfc447bf5ba55b3c4298a8c3_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/egress-router-cni-rhel8@sha256:f71bf0b8d3d636fddd980630a57fa403428750837c605811964c02ca63b8981a_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:57f58659a7d30d948ddf8ab38b67ebbe9a6d66f998996896a0a172fc1ec8ddf8_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:7283e930c661fd6a58735dbeb6a939d5f9f9106c0e2fdbe3b3ebe274c2b6ee96_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:c7a780f2f67b134ecfeb34ce540c3893dd59abc527b07004bf2fb668edc936fe_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:4a9a031768f41f45046ba920df9ecec32a244397db1d3bcfffeef739f8cf738e_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:73a9b18f91592a6e6cadb7dd8c242b4ded5f19384c66cb599a0e9617d24fb0dc_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:b9ed84a563574b83dd7d51a93b69afd6eee8c564b171b69250602756e5250a85_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-machine-controllers@sha256:729b0c33d4e67dfd1f3aff4056ef0375a2fc30d637b00d5d3e462d81802c923e_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:5122d8042f762d7cab4fc3a7f07553a1c254f9179125a1d62f19ae770d996118_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:684f217fb6686960e3c82a2a818fdf0e808ba13077903dd824747312b4a37b81_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:7a4eb5140767609bec29e21dd2f99adcdf54c3b2e19c5bbdd3a64edcec7e7f67_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-azure-machine-controllers@sha256:a7d8bbf796e6231b6c220ead16679d772f6f4fec8f601fdca0f0e0171236d32b_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-installer-rhel8@sha256:28a6d46294851cdab425b28e5c173fffab8868366e3f75dcf08e4192d819df45_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-installer-rhel8@sha256:7ec94f9d4aa27a4202f628816da50484dfe63afd2d036a3e698e1774c30f468b_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-installer-rhel8@sha256:e96c85de394568658d84bfcc99ff01c43bff5a762bfe50a4c3b0c4ebaa78c69f_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-machine-controllers@sha256:37ab58030c1af0972a01a891d0b486b2d1041f101827f52de95d084987e2f602_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-machine-controllers@sha256:47a0ae6e003f337881700cc8682e9b7539812139ec625a139592ba1fe2e812f9_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-machine-controllers@sha256:d45feedb952382f1722298bb48f7c667297d8ac1ef0c4993b736bdd539b2f679_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-rhel8-operator@sha256:659b004f32062989e7c1b045cdcd8c71dbe1596462f03a5e0e2f72b701a28f95_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-rhel8-operator@sha256:b5d9200b41a2efb48dda7c1da3a7613bd0953cc0cb1baf1fbc4e7404b6b657b4_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-rhel8-operator@sha256:c1faedf59c327c454966a216d435b1afb6fab48fe96ba66542a3e10264fd5e6b_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:1a3334c8273b500f582dd96a1be270462463c45101bb5387271eb645d5de1d08_ppc64le as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:ae9c6eec4f1d1f1abd465607ae4492f666fc31d5ea2071bd8c106a581ec3957d_s390x as a component of Red Hat OpenShift Container Platform 4.7
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:cee830686421cecef01a03f4b2f3f88a24e32028367980039433e8e3df03fde6_amd64 as a component of Red Hat OpenShift Container Platform 4.7
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

🔗 References (6)