Red Hat Security Advisory

RHSA-2022:0870

OpenShift Container Platform 4.7.45 packages and security update

Released 2022-03-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.7 cri-o-1.20.6-11.rhaos4.7.git76ea3d0.el7, cri-o-1.20.6-11.rhaos4.7.git76ea3d0.el8

TI-2022-00719 CVE-2022-0811 · GHSA-6x2m-w449-qwx7

MEDIUM 56

A flaw was found in CRI-O in the way it set kernel options for a pod.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.19046 Published 2022-03-16 Fixed in 1.19.6, 1.20.7 +3 CWE-94

TI-2022-00452 CVE-2022-0532 · GHSA-jqmc-79gx-7g8p

LOW 21

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00765 Published 2022-02-09 Partial fix · 1.23.1 CWE-732