Skip to content
OpenAdvisories
Medium RHBA-2022:0793 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.8.34 packages update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.8::el7 cri-o 0:1.21.5-2.rhaos4.8.gitaf64931.el7
Red Hat · OpenShift 4 openshift:4.8::el7 cri-o-debuginfo 0:1.21.5-2.rhaos4.8.gitaf64931.el7
Red Hat · OpenShift 4 openshift:4.8::el8 cri-o 0:1.21.5-2.rhaos4.8.gitaf64931.el8
Red Hat · OpenShift 4 openshift:4.8::el8 cri-o-debuginfo 0:1.21.5-2.rhaos4.8.gitaf64931.el8
Red Hat · OpenShift 4 openshift:4.8::el8 cri-o-debugsource 0:1.21.5-2.rhaos4.8.gitaf64931.el8

Vulnerabilities 1

  • Medium 4.2
    CVE-2022-0532

    Incorrect Permission Assignment for Critical Resource in CRI-O

    An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel n…

    github.com/cri-o/cri-o Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062076
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_0793.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2051730
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0532
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0532
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x
  • article
    https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls