Red Hat Security Advisory 2022-6317-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.9.48. Issues addressed include a bypass vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA256

=====================================================================  
                   Red Hat Security Advisory

Synopsis:          Important: OpenShift Container Platform 4.9.48 bug fix and security update  
Advisory ID:       RHSA-2022:6317-01  
Product:           Red Hat OpenShift Enterprise  
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:6317  
Issue date:        2022-09-12  
CVE Names:         CVE-2021-39226 CVE-2022-0494 CVE-2022-1353   
                   CVE-2022-2526 CVE-2022-29154   
=====================================================================

1. Summary:

Red Hat OpenShift Container Platform release 4.9.48 is now available with  
updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container  
Platform 4.9.

Red Hat Product Security has rated this update as having a security impact  
of Important. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

2. Description:

Red Hat OpenShift Container Platform is Red Hat's cloud computing  
Kubernetes application platform solution designed for on-premise or private  
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container  
Platform 4.9.48. See the following advisory for the RPM packages for this  
release:

https://access.redhat.com/errata/RHBA-2022:6319

Space precludes documenting all of the container images in this advisory.  
See the following Release Notes documentation, which will be updated  
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html

Security Fix(es):

* grafana: Snapshot authentication bypass (CVE-2021-39226)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s)  
listed in the References section.

You may download the oc tool and use it to inspect release image metadata  
as follows:

(For x86_64 architecture)

$ oc adm release info  
quay.io/openshift-release-dev/ocp-release:4.9.48-x86_64

The image digest is  
sha256:fe63bce8c63031a17f08feed4fae704499b749502cb3d51f5df7d8eb002e8e55

(For s390x architecture)

$ oc adm release info  
quay.io/openshift-release-dev/ocp-release:4.9.48-s390x

The image digest is  
sha256:cc5c418771b024b65af22f306c24483421c2e3b351004df1948dc3e9af25b424

(For ppc64le architecture)

$ oc adm release info  
quay.io/openshift-release-dev/ocp-release:4.9.48-ppc64le

The image digest is  
sha256:162a33695defc9acd595451c13ec96eae4557642d6a51521f2aeac22f1c02b8c

All OpenShift Container Platform 4.9 users are advised to upgrade to these  
updated packages and images when they are available in the appropriate  
release channel. To check for available updates, use the OpenShift Console  
or the CLI oc command. Instructions for upgrading a cluster are available  
at  
https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

3. Solution:

For OpenShift Container Platform 4.9 see the following documentation, which  
will be updated shortly for this release, for important instructions on how  
to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html

Details on how to access this content are available at  
https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

4. Bugs fixed (https://bugzilla.redhat.com/):

1996013 - sriov-device-plugin cannot found the VF  
2011063 - CVE-2021-39226 grafana: Snapshot authentication bypass  
2096508 - Pod stuck in Terminating, runc init process frozen  
2097724 - Change Ping source spec.jsonData (deprecated) field  to spec.data  
2101092 - Reserved port 9104 prevents a roll out of new cluster-network-operator Pod during SNO 4.10 upgrade  
2101794 - On-prem loadbalancer ports conflict with kube node port range

5. JIRA issues fixed (https://issues.jboss.org/):

OCPBUGS-410 - Detect unsupported amount of workloads before rendering a lazy or crashing topology  
OCPBUGS-420 - OVS-Configure doesn't iterate connection names containing spaces correctly  
OCPBUGS-443 - [release-4.9] Gather ODF CephCluster resource status  
OCPBUGS-459 - Default catalogs fails liveness/readiness probes  
OCPBUGS-508 - CI failing tests: Create namespace from install operators creates namespace from operator install page  
OCPBUGS-572 - Machine Controller stuck with Terminated Instances while Provisioning on AWS

6. References:

https://access.redhat.com/security/cve/CVE-2021-39226  
https://access.redhat.com/security/cve/CVE-2022-0494  
https://access.redhat.com/security/cve/CVE-2022-1353  
https://access.redhat.com/security/cve/CVE-2022-2526  
https://access.redhat.com/security/cve/CVE-2022-29154  
https://access.redhat.com/security/updates/classification/#important

7. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact  
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1

iQIVAwUBYx+EqtzjgjWX9erEAQhj7hAAk1mCFen6d+pVH7k/XA7d+jL2zi5VpxPb  
R96JdAiNK/Pbx6aRYa3K/9q5FsTjGYOq0ycOt6g2GG21vBLTF07KIXRhtV9L7+d+  
SVffQsFprfM4cgClzaZ6qPYWwUNZo3VyfYLbVG49Z7jFxXmUjsxMGG68qgtyJiWJ  
9Dpk1GtC/xXpLsqH+/s56evRijry/iWNqHXLX/fzGQyKBgTGZMPdix53vKqBb90t  
OvPTdc9WnE68jHRK1nxKHkHGdE85mjtTeSX8ELhjwhDmTWFjdrxfmZ/doDAt313l  
VF3uvIoxTmroiUxvxn/kuVphBxbSombgZmBh3+Y53K9RQVqpR3YGo/MDk/B18QwE  
fWcWnbxJTwI+wGrW5+a/pYMlqVwqIYRX7G1fRlCQtVPg7VY6NELr145KoA4iEWGE  
nLSMpe3BbmRxeLlRB31cID10sYOO7JzR/OKkvQdGIH7OkCMLjxHIN9uyaADHTW6p  
7ii5T5LWKvRmuUlJgG0ToSAbk0wjN7LbPPDJPlo2gmiWj3Atdl3cv+475XXeGRTM  
FpAOlcSkDHTmTVxOvYUB1L/8zkTSyLPDbAIXdZi52mai6gOiBrQqOzJozZa9jnh/  
xHnAoeBU8m0Jn2Op7R5NGx5P7I+roQDnz621IUPwpeeNO2botw7f9qi/wwPCaCC7  
x834/6/1kYE=  
=j6ax  
-----END PGP SIGNATURE-----  
--  
RHSA-announce mailing list  
RHSA-announce@redhat.com  
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Red Hat Security Advisory 2022-6317-01

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.

\# -\*- coding: UTF-8 -\*- from django.urls import path from django.views.i18n import JavaScriptCatalog import sql.instance\_database import sql.query\_privileges import sql.sql\_optimize from common import auth, config, workflow, dashboard, check from common.twofa import totp from sql import views, sql\_workflow, sql\_analyze, query, slowlog, instance, instance\_account, db\_diagnostic, \\ resource\_group, binlog, data\_dictionary, archiver, audit\_log, user from sql.utils import tasks from common.utils import ding\_api urlpatterns \= \[ path('', views.index), path('jsi18n/', JavaScriptCatalog.as\_view(), name\='javascript-catalog'), path('index/', views.index), path('login/', views.login, name\='login'), path('login/2fa/', views.twofa, name\='twofa'), path('logout/', auth.sign\_out), path('signup/', auth.sign\_up), path('sqlworkflow/', views.sqlworkflow), path('submitsql/', views.submit\_sql), path('editsql/', views.submit\_sql), path('submitotherinstance/', views.submit\_sql), path('detail/<int:workflow\_id>/', views.detail, name\='detail'), path('autoreview/', sql\_workflow.submit), path('passed/', sql\_workflow.passed), path('execute/', sql\_workflow.execute), path('timingtask/', sql\_workflow.timing\_task), path('alter\_run\_date/', sql\_workflow.alter\_run\_date), path('cancel/', sql\_workflow.cancel), path('rollback/', views.rollback), path('sqlanalyze/', views.sqlanalyze), path('sqlquery/', views.sqlquery), path('slowquery/', views.slowquery), path('sqladvisor/', views.sqladvisor), path('slowquery\_advisor/', views.sqladvisor), path('queryapplylist/', views.queryapplylist), path('queryapplydetail/<int:apply\_id>/', views.queryapplydetail, name\='queryapplydetail'), path('queryuserprivileges/', views.queryuserprivileges), path('dbdiagnostic/', views.dbdiagnostic), path('workflow/', views.workflows), path('workflow/<int:audit\_id>/', views.workflowsdetail), path('dbaprinciples/', views.dbaprinciples), path('dashboard/', dashboard.pyecharts), path('group/', views.group), path('grouprelations/<int:group\_id>/', views.groupmgmt), path('instance/', views.instance), path('instanceaccount/', views.instanceaccount), path('database/', views.database), path('instanceparam/', views.instance\_param), path('binlog2sql/', views.binlog2sql), path('my2sql/', views.my2sql), path('schemasync/', views.schemasync), path('archive/', views.archive), path('archive/<int:id>/', views.archive\_detail, name\='archive\_detail'), path('config/', views.config), path('audit/', views.audit), path('audit\_sqlquery/', views.audit\_sqlquery), path('audit\_sqlworkflow/', views.audit\_sqlworkflow), path('authenticate/', auth.authenticate\_entry), path('sqlworkflow\_list/', sql\_workflow.sql\_workflow\_list), path('sqlworkflow\_list\_audit/', sql\_workflow.sql\_workflow\_list\_audit), path('sqlworkflow/detail\_content/', sql\_workflow.detail\_content), path('sqlworkflow/backup\_sql/', sql\_workflow.backup\_sql), path('simplecheck/', sql\_workflow.check), path('getWorkflowStatus/', sql\_workflow.get\_workflow\_status), path('del\_sqlcronjob/', tasks.del\_schedule), path('inception/osc\_control/', sql\_workflow.osc\_control), path('sql\_analyze/generate/', sql\_analyze.generate), path('sql\_analyze/analyze/', sql\_analyze.analyze), path('workflow/list/', workflow.lists), path('workflow/log/', workflow.log), path('config/change/', config.change\_config), path('check/inception/', check.inception), path('check/go\_inception/', check.go\_inception), path('check/email/', check.email), path('check/instance/', check.instance), path('group/group/', resource\_group.group), path('group/addrelation/', resource\_group.addrelation), path('group/relations/', resource\_group.associated\_objects), path('group/instances/', resource\_group.instances), path('group/unassociated/', resource\_group.unassociated\_objects), path('group/auditors/', resource\_group.auditors), path('group/changeauditors/', resource\_group.changeauditors), path('group/user\_all\_instances/', resource\_group.user\_all\_instances), path('instance/list/', instance.lists), path('instance/user/list', instance\_account.users), path('instance/user/create/', instance\_account.create), path('instance/user/edit/', instance\_account.edit), path('instance/user/grant/', instance\_account.grant), path('instance/user/reset\_pwd/', instance\_account.reset\_pwd), path('instance/user/lock/', instance\_account.lock), path('instance/user/delete/', instance\_account.delete), path('instance/database/list/', sql.instance\_database.databases), path('instance/database/create/', sql.instance\_database.create), path('instance/database/edit/', sql.instance\_database.edit), path('instance/schemasync/', instance.schemasync), path('instance/instance\_resource/', instance.instance\_resource), path('instance/describetable/', instance.describe), path('data\_dictionary/', views.data\_dictionary), path('data\_dictionary/table\_list/', data\_dictionary.table\_list), path('data\_dictionary/table\_info/', data\_dictionary.table\_info), path('data\_dictionary/export/', data\_dictionary.export), path('param/list/', instance.param\_list), path('param/history/', instance.param\_history), path('param/edit/', instance.param\_edit), path('query/', query.query), path('query/querylog/', query.querylog), path('query/querylog\_audit/', query.querylog\_audit), path('query/favorite/', query.favorite), path('query/explain/', sql.sql\_optimize.explain), path('query/applylist/', sql.query\_privileges.query\_priv\_apply\_list), path('query/userprivileges/', sql.query\_privileges.user\_query\_priv), path('query/applyforprivileges/', sql.query\_privileges.query\_priv\_apply), path('query/modifyprivileges/', sql.query\_privileges.query\_priv\_modify), path('query/privaudit/', sql.query\_privileges.query\_priv\_audit), path('binlog/list/', binlog.binlog\_list), path('binlog/binlog2sql/', binlog.binlog2sql), path('binlog/my2sql/', binlog.my2sql), path('binlog/del\_log/', binlog.del\_binlog), path('slowquery/review/', slowlog.slowquery\_review), path('slowquery/review\_history/', slowlog.slowquery\_review\_history), path('slowquery/optimize\_sqladvisor/', sql.sql\_optimize.optimize\_sqladvisor), path('slowquery/optimize\_sqltuning/', sql.sql\_optimize.optimize\_sqltuning), path('slowquery/optimize\_soar/', sql.sql\_optimize.optimize\_soar), path('slowquery/optimize\_sqltuningadvisor/', sql.sql\_optimize.optimize\_sqltuningadvisor), path('slowquery/report/', slowlog.report), path('db\_diagnostic/process/', db\_diagnostic.process), path('db\_diagnostic/create\_kill\_session/', db\_diagnostic.create\_kill\_session), path('db\_diagnostic/kill\_session/', db\_diagnostic.kill\_session), path('db\_diagnostic/tablesapce/', db\_diagnostic.tablesapce), path('db\_diagnostic/trxandlocks/', db\_diagnostic.trxandlocks), path('db\_diagnostic/innodb\_trx/', db\_diagnostic.innodb\_trx), path('archive/list/', archiver.archive\_list), path('archive/apply/', archiver.archive\_apply), path('archive/audit/', archiver.archive\_audit), path('archive/switch/', archiver.archive\_switch), path('archive/once/', archiver.archive\_once), path('archive/log/', archiver.archive\_log), path('4admin/sync\_ding\_user/', ding\_api.sync\_ding\_user), path('audit/log/', audit\_log.audit\_log), path('audit/input/', audit\_log.audit\_input), path('user/list/', user.lists), path('user/qrcode/<str:data>/', totp.generate\_qrcode), \]

CVE-2022-38538: Archery/urls.py at v1.8.5 · hhyo/Archery

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.

CVE-2022-38539: Archery/urls.py at v1.8.5 · hhyo/Archery

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.

CVE-2022-38537: Archery/urls.py at v1.8.5 · hhyo/Archery

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the my2sql interface.

CVE-2022-38541: Archery/urls.py at v1.8.5 · hhyo/Archery

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session interface.

CVE-2022-38540: Archery/urls.py at v1.8.5 · hhyo/Archery

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.

CVE-2022-38542: Archery/urls.py at v1.8.5 · hhyo/Archery

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

🤖 GitLab Bot 🤖 authored Sep 12, 2022

CVE-2022-3190: 2022/CVE-2022-3190.json · master · GitLab.org / cves · GitLab

Red Hat OpenShift Container Platform release 4.7.59 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.7.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:
* CVE-2021-39226: grafana: Snapshot authentication bypass


Skip to navigation Skip to main content

**Utilities**

*   Subscriptions
*   Downloads
*   Containers
*   Support Cases

**Infrastructure and Management**

*   Red Hat Enterprise Linux
*   Red Hat Virtualization
*   Red Hat Identity Management
*   Red Hat Directory Server
*   Red Hat Certificate System
*   Red Hat Satellite
*   Red Hat Subscription Management
*   Red Hat Update Infrastructure
*   Red Hat Insights
*   Red Hat Ansible Automation Platform

**Cloud Computing**

*   Red Hat OpenShift
*   Red Hat CloudForms
*   Red Hat OpenStack Platform
*   Red Hat OpenShift Container Platform
*   Red Hat OpenShift Data Science
*   Red Hat OpenShift Online
*   Red Hat OpenShift Dedicated
*   Red Hat Advanced Cluster Security for Kubernetes
*   Red Hat Advanced Cluster Management for Kubernetes
*   Red Hat Quay
*   Red Hat CodeReady Workspaces
*   Red Hat OpenShift Service on AWS

**Storage**

*   Red Hat Gluster Storage
*   Red Hat Hyperconverged Infrastructure
*   Red Hat Ceph Storage
*   Red Hat OpenShift Data Foundation

**Runtimes**

*   Red Hat Runtimes
*   Red Hat JBoss Enterprise Application Platform
*   Red Hat Data Grid
*   Red Hat JBoss Web Server
*   Red Hat Single Sign On
*   Red Hat support for Spring Boot
*   Red Hat build of Node.js
*   Red Hat build of Thorntail
*   Red Hat build of Eclipse Vert.x
*   Red Hat build of OpenJDK
*   Red Hat build of Quarkus

**Integration and Automation**

*   Red Hat Process Automation
*   Red Hat Process Automation Manager
*   Red Hat Decision Manager

All Products

Issued:

2022-09-13

Updated:

2022-09-13

**RHSA-2022:6322 - Security Advisory**

*   Overview
*   Updated Packages

**Synopsis**

Moderate: OpenShift Container Platform 4.7.59 bug fix and security update

**Type/Severity**

Security Advisory: Moderate

**Topic**

Red Hat OpenShift Container Platform release 4.7.59 is now available with  
updates to packages and images that fix several bugs and add enhancements.  

This release includes a security update for Red Hat OpenShift Container Platform 4.7.  

Red Hat Product Security has rated this update as having a security impact  
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,  
which gives a detailed severity rating, is available for each vulnerability  
from the CVE link(s) in the References section.

**Description**

Red Hat OpenShift Container Platform is Red Hat's cloud computing  
Kubernetes application platform solution designed for on-premise or private  
cloud deployments.  

This advisory contains the container images for Red Hat OpenShift Container Platform 4.7.59. See the following advisory for the RPM packages for this release:  

https://access.redhat.com/errata/RHBA-2022:6321

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:  

https://docs.openshift.com/container-platform/4.7/release\_notes/ocp-4-7-release-notes.html

Security Fix(es):  

*   grafana: Snapshot authentication bypass (CVE-2021-39226)

For more details about the security issue(s), including the impact, a CVSS  
score, acknowledgments, and other related information, refer to the CVE  
page(s)  
listed in the References section.  

You may download the oc tool and use it to inspect release image metadata as follows:  

(For x86\_64 architecture)  

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.59-x86\_64  

The image digest is sha256:5db88217bbc9ee12d95f3c740eb0217668628e2f1f61b9cb2afdddf16ffb1333  

(For s390x architecture)  

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.59-s390x  

The image digest is sha256:173203569ce6f5c0c0cd76824a8cd6182f3488ba5e0621559ef8430b40abaa3f  

(For ppc64le architecture)  

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.59-ppc64le  

The image digest is sha256:351d809f8b29d8a7990092f84442f2f77594e5888b851c0c096d21097dd7c451  

All OpenShift Container Platform 4.7 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available  
at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

**Affected Products**

*   Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86\_64
*   Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8 ppc64le
*   Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8 s390x

**Fixes**

*   BZ - 1969870 - virt-launcher pod stuck in Init:0/1 status: error adding container to network "bigip1ens4f0vf2": SRIOV-CNI failed to load netconf: LoadConf(): VF pci addr is required
*   BZ - 1994486 - couldn't find ipfamilies for headless service
*   BZ - 2011063 - CVE-2021-39226 grafana: Snapshot authentication bypass
*   BZ - 2113999 - NetworkManager didn't automatically renew the lease on the VLAN interface configured using nmstate
*   BZ - 2117078 - \[4.7z\] WebScale: duplicate ecmp next hop error caused by multiple of the same gateway IPs in ovnkube cache
*   BZ - 2117347 - ClusterVersion history pruner does not always retain initial completed update entry
*   OCPBUGS-875 - Placeholder bug for OCP 4.7.0 image release

**CVEs**

*   CVE-2021-39226
*   CVE-2022-0494
*   CVE-2022-1353
*   CVE-2022-2526
*   CVE-2022-29154

**Red Hat OpenShift Container Platform 4.7 for RHEL 8**

SRPM

x86\_64

**Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8**

SRPM

ppc64le

**Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8**

SRPM

s390x

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

RHSA-2022:6322: Red Hat Security Advisory: OpenShift Container Platform 4.7.59 bug fix and security update

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf.

An attacker requires an account on the SmartVista SVFE2. An attacker can use a quote character to break query string and inject sql payload to "UserForm:j\_id90" parameter (Description) in /SVFE2/pages/feegroups/tgrt\_group.jsf. Response data could help an attacker identify whether an injected SQL query is correct or not.

Tag

#js