RHSA-2022:0860: Red Hat Security Advisory: OpenShift Container Platform 4.9.25 security update

Skip to navigation Skip to main content

Utilities

• Subscriptions
• Downloads
• Containers
• Support Cases

Infrastructure and Management

• Red Hat Enterprise Linux
• Red Hat Virtualization
• Red Hat Identity Management
• Red Hat Directory Server
• Red Hat Certificate System
• Red Hat Satellite
• Red Hat Subscription Management
• Red Hat Update Infrastructure
• Red Hat Insights
• Red Hat Ansible Automation Platform

Cloud Computing

• Red Hat OpenShift
• Red Hat CloudForms
• Red Hat OpenStack Platform
• Red Hat OpenShift Container Platform
• Red Hat OpenShift Data Science
• Red Hat OpenShift Online
• Red Hat OpenShift Dedicated
• Red Hat Advanced Cluster Security for Kubernetes
• Red Hat Advanced Cluster Management for Kubernetes
• Red Hat Quay
• Red Hat CodeReady Workspaces
• Red Hat OpenShift Service on AWS

Storage

• Red Hat Gluster Storage
• Red Hat Hyperconverged Infrastructure
• Red Hat Ceph Storage
• Red Hat OpenShift Data Foundation

Runtimes

• Red Hat Runtimes
• Red Hat JBoss Enterprise Application Platform
• Red Hat Data Grid
• Red Hat JBoss Web Server
• Red Hat Single Sign On
• Red Hat support for Spring Boot
• Red Hat build of Node.js
• Red Hat build of Thorntail
• Red Hat build of Eclipse Vert.x
• Red Hat build of OpenJDK
• Red Hat build of Quarkus
• Red Hat CodeReady Studio

Integration and Automation

• Red Hat Process Automation
• Red Hat Process Automation Manager
• Red Hat Decision Manager

All Products

Issued:

2022-03-21

Updated:

2022-03-21

RHSA-2022:0860 - Security Advisory

• Overview
• Updated Packages

Synopsis

Important: OpenShift Container Platform 4.9.25 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Red Hat OpenShift Container Platform release 4.9.25 is now available with
updates to packages and images that fix several bugs and add enhancements.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.9.25. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHBA-2022:0861

All OpenShift Container Platform 4.9 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

Security Fix(es):

• CRI-O: Arbitrary code execution in cri-o via abusing

“kernel.core_pattern” kernel parameter (CVE-2022-0811)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.

Affected Products

• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 7 x86_64
• Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.9 aarch64

Fixes

• BZ - 2059475 - CVE-2022-0811 CRI-O: Arbitrary code execution in cri-o via abusing “kernel.core_pattern” kernel parameter
• BZ - 2063911 - Placeholder bug for OCP 4.9.0 rpm release

Red Hat OpenShift Container Platform 4.9 for RHEL 8

SRPM

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.src.rpm

SHA-256: 26d8a40fbbd0fabc4cbb1e6e5956f95357affe77858215621bb9490ad39346f9

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.src.rpm

SHA-256: 386eceda3f92852323644ed4a3bc7d925633e873f8719ef5ad6fe9e10d3376a5

x86_64

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.x86_64.rpm

SHA-256: f8e3063209d19c93a61587d1713e05c9e4eb1789095e4bf2b3e71a51acb9e5fe

cri-o-debuginfo-1.22.2-3.rhaos4.9.gitb030be8.el8.x86_64.rpm

SHA-256: 7902688bc3c08467e4d2cae3efa0048ec2a291df815113e1675611703f507384

cri-o-debugsource-1.22.2-3.rhaos4.9.gitb030be8.el8.x86_64.rpm

SHA-256: 0a0a5f3bd4d05a755924754f1a44fa38ecbdb49b48dda6e35e5148a8d40815fc

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.x86_64.rpm

SHA-256: 94c95ba7c9b3f12a3bb4a454b422185675597109d2dbe44be47c6b1814b04cf7

openshift-clients-redistributable-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.x86_64.rpm

SHA-256: 6e1d71f8b628bd87d03dd3356acd2e20d8972bba3a3c68d0e670dad078dcf476

Red Hat OpenShift Container Platform 4.9 for RHEL 7

SRPM

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el7.src.rpm

SHA-256: e7ca1f4117231b654bb8b4a9445d3bbcb2f402ac4afefb8764fe4b663d76f925

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el7.src.rpm

SHA-256: f85ee6df37f150b6912bc78d66a921636ff1911687cc739b41177c76b94c2b97

x86_64

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el7.x86_64.rpm

SHA-256: 9da86146b77d9cd17214b827e901a98fecdf36b1c29aca7acebf874fabfd5ac8

cri-o-debuginfo-1.22.2-3.rhaos4.9.gitb030be8.el7.x86_64.rpm

SHA-256: 016ae57e66d5f96db3fb0da7c12084404ca1540ea66f07a2ef556945342da87f

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el7.x86_64.rpm

SHA-256: 985cf7707947c6bb9b6468c2adfda155eb4aebbe7bf83554cfc700f08f9d77c1

openshift-clients-redistributable-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el7.x86_64.rpm

SHA-256: 1a0dcd32da7a606606b691991d7d91017ca108994951f3670331ffee0532ad02

Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8

SRPM

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.src.rpm

SHA-256: 26d8a40fbbd0fabc4cbb1e6e5956f95357affe77858215621bb9490ad39346f9

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.src.rpm

SHA-256: 386eceda3f92852323644ed4a3bc7d925633e873f8719ef5ad6fe9e10d3376a5

ppc64le

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.ppc64le.rpm

SHA-256: 396349f2e9d551f80d467d39fb4e5ed8d3b377e809c6bda2e8561775f371fccb

cri-o-debuginfo-1.22.2-3.rhaos4.9.gitb030be8.el8.ppc64le.rpm

SHA-256: b32722092a86239aa3cc8bf087ef6e5b72b2aefed671af096cc7b0a2e3ec2456

cri-o-debugsource-1.22.2-3.rhaos4.9.gitb030be8.el8.ppc64le.rpm

SHA-256: 6871b06b8ff070101a0fb61ca9a68d7a255866b3422fe6a9a7f2e742e4373bb9

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.ppc64le.rpm

SHA-256: d3b5beb65443b32e014fcb2ba7aef481bb9b5540fa38eb2aa57cc621ab163376

Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8

SRPM

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.src.rpm

SHA-256: 26d8a40fbbd0fabc4cbb1e6e5956f95357affe77858215621bb9490ad39346f9

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.src.rpm

SHA-256: 386eceda3f92852323644ed4a3bc7d925633e873f8719ef5ad6fe9e10d3376a5

s390x

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.s390x.rpm

SHA-256: 3963cc749dd621999c92c61d20e0da763b3c8eacd82b29dada6c444e4f60cd79

cri-o-debuginfo-1.22.2-3.rhaos4.9.gitb030be8.el8.s390x.rpm

SHA-256: 64c0360e0de0f2f4deb0f13c1f64f2a2a36d3dd81c4adeb559abeba50d87ef9f

cri-o-debugsource-1.22.2-3.rhaos4.9.gitb030be8.el8.s390x.rpm

SHA-256: c1c2377e9907c4aa816549eee7992b7f2d5ee84dac7f2291cac6b634dc2eb681

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.s390x.rpm

SHA-256: 0d6d70913e542dbf5c2a2a1c308fa2d347dcb6e2d4011df6e2951ae38ff5465a

Red Hat OpenShift Container Platform for ARM 64 4.9

SRPM

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.src.rpm

SHA-256: 26d8a40fbbd0fabc4cbb1e6e5956f95357affe77858215621bb9490ad39346f9

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.src.rpm

SHA-256: 386eceda3f92852323644ed4a3bc7d925633e873f8719ef5ad6fe9e10d3376a5

aarch64

cri-o-1.22.2-3.rhaos4.9.gitb030be8.el8.aarch64.rpm

SHA-256: 87123ff22ae43e58623ee698159925d070c3bc50c5eb508859b3ceaa958d31d7

cri-o-debuginfo-1.22.2-3.rhaos4.9.gitb030be8.el8.aarch64.rpm

SHA-256: 0e4c04fe0f8c1129b5a4f1cefc49be95e05b137232fa41b1fc433baf908031d1

cri-o-debugsource-1.22.2-3.rhaos4.9.gitb030be8.el8.aarch64.rpm

SHA-256: 0595e2773dcf370f0d33251ed7b42612892ed854fc1323da869b7f7afd7c3eeb

openshift-clients-4.9.0-202203112019.p0.g1791fd4.assembly.stream.el8.aarch64.rpm

SHA-256: 6f43df16a022108a8b7daddc5eb3e38f26124c711bf9963dba65c25e782fe710

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.