Skip to content
OpenAdvisories
Medium RHBA-2022:5433 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.9.41 packages update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.9::el7 cri-o 0:1.22.5-7.rhaos4.9.git3dbcd3c.el7
Red Hat · OpenShift 4 openshift:4.9::el7 cri-o-debuginfo 0:1.22.5-7.rhaos4.9.git3dbcd3c.el7
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o 0:1.22.5-7.rhaos4.9.git3dbcd3c.el8
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o-debuginfo 0:1.22.5-7.rhaos4.9.git3dbcd3c.el8
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o-debugsource 0:1.22.5-7.rhaos4.9.git3dbcd3c.el8

Vulnerabilities 1

  • Medium 4.8
    CVE-2022-27652

    Incorrect Default Permissions in CRI-O

    A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw al…

    github.com/cri-o/cri-o Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2102503
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_5433.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-27652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066839
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-27652
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-27652
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6