Red Hat Security Advisory

RHSA-2023:1033

OpenShift Container Platform 4.12.6 packages and security update

Released 2023-03-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 cri-o-1.25.2-10.rhaos4.12.git0a083f9.el8, cri-o-1.25.2-9.rhaos4.12.git0a083f9.el9

Fixes 1 record

TI-2022-03955 CVE-2022-4318 · GHSA-cm9x-c3rh-7rc4

Cri-o: /etc/passwd tampering privesc

LOW 36

A vulnerability was found in cri-o.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0029 Published 2023-09-25 Fixed in 1.24.4-10.rhaos4.11.git1ed5ac5.el8, 1.25.2-9.rhaos4.12.git0a083f9.el9 +1 CWE-538