RHSA-2022:6103MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.1 bug fix and security update

Published
August 23, 2022
Last Modified
September 30, 2026

🔗 CVE IDs covered (2)

CVE-2022-30629 →CVE-2022-30631 →

📋 Description

CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:6e27d73d86ae20585752a7c2e3a3cfa41ee88c245e9ab9da123c86b91b77bf4d_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:e3cc37918d771c7d87052387de7a4f585c329cec0b8537b41f411cf7e08e7ef6_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:e7867ad391b8f7cca4d987f7fd7cc429b86665029cc7b226ccd32aec5bf2556e_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/cloud-network-config-controller-rhel8@sha256:eaedb1749fc0f2c117497ca4e2e82e9366b3e776d9910d45fbc1be4daa774ae8_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:0d876f138cb07c4cf25bc0161041f92a25a81637367815ab20c8ac30e11d7f0a_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:82faeb6a8caa174d9df3d259945ca161311fe6231d628e34ee0f1c8528371229_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:d3edb75ef363d202953c7fab5e997a5f2430108b6882f4b857de2be7c4ed8ffb_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:ebbdb04cefcb10f1932415c1fe7453b20066594c0febd1f6e3d28dd71c29c939_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:5d87bcb5e32b7d69df1d713fd61a71d0223447258deb728b26249ca197bad943_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:73fb4c432aeea93a109c119097ea849c1e4ae02bf7dd196ebb63d46223c7837e_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:9cb6ff6b82565bbfb4af2b9ffe93148d2d145775c33fef56beb7de901ebd0eb6_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/egress-router-cni-rhel8@sha256:c73b6663d221184ae7920fb6fcb5191591b697faed01b7a30cf8116f60bd6898_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:6de9ef410c3940d5292b3ba93952497959d67dbd82bbce9d4096032fa4ddb35f_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:988faf6dc4951404eb8886150c33905880b81b32ca3ba1713911e4fd525bc000_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:b914a9caeedc9c9777e28e71ed81416a1bf0fd6104b164ba756555192cf95063_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:f14cafc7dd1904d01ec797a18bbc6753a751b113af94e0122697af4b6cd75cb9_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/oc-mirror-plugin-rhel8@sha256:6504ab4496384eb70fd230933f7c6a3ea76b75c66afa7a7dfbd02ac1ad205515_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:03cab1a6deb73e00dbea5cdd97c2eae70f34f01b2b45eebef32207a44b9740be_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:311118642213a933c9d68e20043c7ac224fffa67bc6d563736af7836dc45bf22_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:75d72fff160648cec863535b7ca3206dcf8b1d0e8686f1c20b55d684c9fd33dc_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:f75740f83210434f126f13c414165a96ba2cf24e081d37ce147381c672211f6d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:5a2e4ce921dd19131cc4701701a1e15ab63c5862bf6c6c6d6c699a014be9e15d_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:832c7fad36504af9ff0ea617eee9ce7e0d90c3b062dd49764709359ef742526b_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:ea0d1078f53d769332eb6d74134b246c3e1d3a3a39832055c303b134a4eed290_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:efcf0bcdb223445c64a7632b14621f40e3262f1aff7a8433246b56dada0c5ab5_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:3debd079d7a4e557aec8bf4f9e67aace0b72205a5d020206760fdfb59d13855c_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:6b7f448cc4ff12f26fe23266eae4532a5a516179eb3081a477d4a1b287d004ca_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:969a995f0c2079554cad5db05df992e5da80d5645f97e031048dcb6625936c0e_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:b2078745a9931f618b2ae3276f215f72a82570aebb1f871a086d74995f08f437_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (65)