RHSA-2022:6262HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.6.61 bug fix and security update

Published
September 9, 2022
Last Modified
August 2, 2026

🔗 CVE IDs covered (2)

CVE-2021-39226 →CVE-2022-30631 →

📋 Description

CVE-2021-39226 — grafana: Snapshot authentication bypass CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.6
  • openshift4/driver-toolkit-rhel8@sha256:14a52abf0b3436e1a3e0b745ae245bda7e64579c77348138fd82d42f30b0e54e_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/driver-toolkit-rhel8@sha256:d010fd6443db2f8f3451b7916ae7f06fe4711452e5650b240ed8312fe38e7f49_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/driver-toolkit-rhel8@sha256:eebd206e4b6588db9e20bbfe8de6b6e3d90981a69e7cd030f9d2b390b36603da_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:2b3fbe16ca176ab2cfbe80ad6ce5baa3318b175b2a66bfb243eb059701831e75_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:74e18dec0471bc65423d0c873442f1b672c82eb2dda5e1c0b3d411ec929a5430_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:e12fdd612ad70544148abf9f0708f3582a3aa90ed88b8d586fcb1c6cde821524_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:9be33f8b846384df1dd48950a54ef0a4045a9879929594e9cac8942c7e7de699_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:b4a91fda5c15ac49109a7c9dabaa43ff11851dd00999c84996e7b46a0502f08f_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:df2507043ba42544e018edd5d7abcb9e1c3a8714eede7e2306bc58154ffde7dc_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-machine-controllers@sha256:4296d9a0b4a3b9ae6150df476b108e674d2bfa51890237df05fe54571885786d_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:010f89c89abc1143af47b568299b5cd2ef3d72a430539465544745bc116e2bce_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:550eb1be3088cf84c978f224dc834eba31106ae65dfa36055a8e6c9fd1da6df1_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:93e2e3e74def50dfd08607e9d7d9593a666cc16e7524b2b9990d6b9c00e0179e_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-azure-machine-controllers@sha256:091934d420333a4cd517f95bd69b8ae4a8bb822916e1dce208e011066bf11979_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-installer-rhel8@sha256:91ff1e17e230675ec0f7d77e3b897a30b1e9b324a376528cff3e44f5bd500110_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-installer-rhel8@sha256:e088c0287ae944a683387d40769072bcda694071cf7c10dc89e9ecb10f13b8f1_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-installer-rhel8@sha256:e6288757e87170899ce75fcce61dd851de3a0c870a117db9ac90c2702b29f0a2_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-machine-controllers@sha256:764650d523b4b314aeccabf65607598d4aa1c2590ec69cd3d69d4b8bb4eab035_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-machine-controllers@sha256:994dbdb25b61028e95959fd87bf162ca3cd034db79bbe5f6f2879cf5a926c419_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-machine-controllers@sha256:eb3d984eb4d8e9a1cd523718cf651d5043417ad4182ee7899f851e2f7f8993bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-rhel8-operator@sha256:03444accb0959dd4b66f2c70ce99501893508fdf92e1ffbd00372ce6d85efb17_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-rhel8-operator@sha256:0de1eaf1d4312ff21948f0c14ece8dea021fd9bab910fc8cd9cd744c46687499_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-rhel8-operator@sha256:68c75186f372afdb9c2ad951aaf3bb93573b082be48ae92a0dfaf24a3d7589ef_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:83d887a554dd17be9cc5333a8bedb1fd7479495c79ffd2d12264a27ac5a7b447_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:d85ef34ee74ed7e47b553a44c0bc795ea5c3e8fccfbfe15ba912b4d78489f71f_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fe76aa75252098f8c2570174aa360df7bcb9acc3b0568709ac879c1b66c41f6b_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-cli-artifacts@sha256:025bb3f2109775597310889d86977fbff275d2ba3e70b85059b68078f46ab22e_amd64 as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-cli-artifacts@sha256:2be54a8afc68fae3883f6550495e464bb361e2d91f1f3c3b9463541f4dd7edc0_ppc64le as a component of Red Hat OpenShift Container Platform 4.6
  • openshift4/ose-cli-artifacts@sha256:ea67222d341fc23a173c6c604367be509a0ee8b47d7680e3916a09e9231c69ef_s390x as a component of Red Hat OpenShift Container Platform 4.6
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html

🔗 References (9)