RHSA-2022:7398MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update

Published
January 17, 2023
Last Modified
August 24, 2026

🔗 CVE IDs covered (16)

CVE-2022-27664 →CVE-2022-32148 →CVE-2022-32189 →CVE-2022-3172 →CVE-2022-3259 →CVE-2022-41715 →CVE-2022-3162 →CVE-2021-4235 →CVE-2022-1705 →CVE-2022-2880 →CVE-2022-2995 →CVE-2022-2996 →CVE-2022-3466 →CVE-2022-32190 →CVE-2022-2879 →CVE-2022-30631 →

📋 Description

CVE-2021-4235 — go-yaml: Denial of Service in go-yaml CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-2879 — golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers CVE-2022-2880 — golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-2995 — cri-o: incorrect handling of the supplementary groups CVE-2022-2996 — python-scciclient: missing server certificate verification CVE-2022-3162 — kubernetes: Unauthorized read of Custom Resources CVE-2022-3172 — kube-apiserver: Aggregated API server can cause clients to be redirected (SSRF) CVE-2022-3259 — OpenShift: Missing HTTP Strict Transport Security CVE-2022-3466 — cri-o: Security regression of CVE-2022-27652 CVE-2022-27664 — golang: net/http: handle server errors after sending GOAWAY CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working CVE-2022-32189 — golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32190 — golang: net/url: JoinPath does not strip relative path components in all circumstances CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps

🎯 Affected products200

  • Ironic content for Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.12
  • NetworkManager-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-1:1.36.0-8.el8_6.src as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-debuginfo-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-debuginfo-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-debuginfo-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-adsl-debuginfo-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-debuginfo-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-debuginfo-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-debuginfo-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-bluetooth-debuginfo-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-1:1.36.0-8.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-debuginfo-1:1.36.0-8.el8_6.aarch64 as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-debuginfo-1:1.36.0-8.el8_6.ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • NetworkManager-cloud-setup-debuginfo-1:1.36.0-8.el8_6.s390x as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (15)