Skip to content
OpenAdvisories
High RHSA-2022:0866 2 CVEs

Red Hat Security Advisory: OpenShift Container Platform 4.6.56 packages and security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.6::el7 cri-o 0:1.19.5-3.rhaos4.6.git91f8458.el7
Red Hat · OpenShift 4 openshift:4.6::el7 cri-o-debuginfo 0:1.19.5-3.rhaos4.6.git91f8458.el7
Red Hat · OpenShift 4 openshift:4.6::el8 cri-o 0:1.19.5-3.rhaos4.6.git91f8458.el8
Red Hat · OpenShift 4 openshift:4.6::el8 cri-o-debuginfo 0:1.19.5-3.rhaos4.6.git91f8458.el8
Red Hat · OpenShift 4 openshift:4.6::el8 cri-o-debugsource 0:1.19.5-3.rhaos4.6.git91f8458.el8

Vulnerabilities 2

  • High 8.8
    CVE-2022-0811 Public exploit EPSS 19%

    Code Injection in CRI-O

    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  • Medium 4.2
    CVE-2022-0532

    Incorrect Permission Assignment for Critical Resource in CRI-O

    An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel n…

    github.com/cri-o/cri-o Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2059475
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064006
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0866.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2051730
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0532
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0532
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x
  • article
    https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
  • report
    https://access.redhat.com/security/cve/CVE-2022-0811
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0811
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0811
  • article
    https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7