Skip to content
OpenAdvisories
High RHSA-2022:0860 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.9.25 security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.9::el7 cri-o 0:1.22.2-3.rhaos4.9.gitb030be8.el7
Red Hat · OpenShift 4 openshift:4.9::el7 cri-o-debuginfo 0:1.22.2-3.rhaos4.9.gitb030be8.el7
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o 0:1.22.2-3.rhaos4.9.gitb030be8.el8
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o-debuginfo 0:1.22.2-3.rhaos4.9.gitb030be8.el8
Red Hat · OpenShift 4 openshift:4.9::el8 cri-o-debugsource 0:1.22.2-3.rhaos4.9.gitb030be8.el8

Vulnerabilities 1

  • High 8.8
    CVE-2022-0811 Public exploit EPSS 19%

    Code Injection in CRI-O

    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2059475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2063911
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0860.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0811
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0811
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0811
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7