RHSA-2022:9096MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift support for Windows Containers 7.0.0 [security update]

Published
January 30, 2023
Last Modified
October 22, 2026

🔗 CVE IDs covered (3)

CVE-2021-25749 →CVE-2022-21698 →CVE-2022-27191 →

📋 Description

CVE-2021-25749 — kubelet: runAsNonRoot logic bypass for Windows containers CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-27191 — golang: crash in a golang.org/x/crypto/ssh server

🎯 Affected products3

  • Red Hat OpenShift Container Platform 4.12
  • openshift4-wincw/windows-machine-config-operator-bundle@sha256:d46ef80b2e76c8bafb73eac0179bc8e192874dcefba5248666850817d5c14f52_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4-wincw/windows-machine-config-rhel8-operator@sha256:ee7f0b1227f7d4cdfed52e5b88ecacdb9131f85b046fa8fec8c384e1267a2aed_amd64 as a component of Red Hat OpenShift Container Platform 4.12

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (30)