RHSA-2022:4668: Moderate: OpenShift Virtualization 4.10.1 Images security and bug fix update
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.This advisory contains the following OpenShift Virtualization 4.10.1 images:RHEL-8-CNV-4.10==============virtio-win-container-v4.10.1-4hostpath-provisioner-operator-container-v4.10.1-6bridge-marker-container-v4.10.1-12cnv-containernetworking-plugins-container-v4.10.1-12ovs-cni-plugin-container-v4.10.1-12kubemacpool-container-v4.10.1-12ovs-cni-marker-container-v4.10.1-12kubernetes-nmstate-handler-container-v4.10.1-12cluster-network-addons-operator-container-v4.10.1-12cnv-must-gather-container-v4.10.1-15hyperconverged-cluster-webhook-container-v4.10.1-19hyperconverged-cluster-operator-container-v4.10.1-19kubevirt-ssp-operator-container-v4.10.1-10virt-cdi-apiserver-container-v4.10.1-16virt-cdi-controller-container-v4.10.1-16hostpath-provisioner-container-v4.10.1-5virt-cdi-uploadserver-container-v4.10.1-16node-maintenance-operator-container-v4.10.1-4virt-cdi-operator-container-v4.10.1-16virt-cdi-uploadproxy-container-v4.10.1-16hostpath-csi-driver-container-v4.10.1-5virt-cdi-cloner-container-v4.10.1-16kubevirt-template-validator-container-v4.10.1-4virt-cdi-importer-container-v4.10.1-16virt-api-container-v4.10.1-8virt-handler-container-v4.10.1-8virt-controller-container-v4.10.1-8virt-launcher-container-v4.10.1-8virt-artifacts-server-container-v4.10.1-8libguestfs-tools-container-v4.10.1-8virt-operator-container-v4.10.1-8hco-bundle-registry-container-v4.10.1-99Security Fix(es): golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221) prometheus/clientgolang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) opencontainers: OCI manifest and index parsing confusion (CVE-2021-41190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenShift Virtualizationto a version that resolves this vulnerability.Fixed in 4.10.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:4668?
The severity of RHSA-2022:4668 is classified as important.
How do I fix RHSA-2022:4668?
To fix RHSA-2022:4668, you should update the affected packages to the latest version available.
What products are affected by RHSA-2022:4668?
RHSA-2022:4668 affects OpenShift Virtualization 4.10.1 images in Red Hat OpenShift Container Platform.
Is RHSA-2022:4668 related to security vulnerabilities?
Yes, RHSA-2022:4668 addresses security vulnerabilities in the OpenShift Virtualization solution.
When was RHSA-2022:4668 issued?
RHSA-2022:4668 was issued in December 2022.