Headline
RHSA-2022:0483: Red Hat Security Advisory: OpenShift Container Platform 4.8.31 security update
Red Hat OpenShift Container Platform release 4.8.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2022-20612: jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF
- CVE-2022-20617: jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution
Skip to navigation Skip to main content
Utilities
- Subscriptions
- Downloads
- Containers
- Support Cases
Infrastructure and Management
- Red Hat Enterprise Linux
- Red Hat Virtualization
- Red Hat Identity Management
- Red Hat Directory Server
- Red Hat Certificate System
- Red Hat Satellite
- Red Hat Subscription Management
- Red Hat Update Infrastructure
- Red Hat Insights
- Red Hat Ansible Automation Platform
Cloud Computing
- Red Hat OpenShift
- Red Hat CloudForms
- Red Hat OpenStack Platform
- Red Hat OpenShift Container Platform
- Red Hat OpenShift Data Science
- Red Hat OpenShift Online
- Red Hat OpenShift Dedicated
- Red Hat Advanced Cluster Security for Kubernetes
- Red Hat Advanced Cluster Management for Kubernetes
- Red Hat Quay
- Red Hat CodeReady Workspaces
- Red Hat OpenShift Service on AWS
Storage
- Red Hat Gluster Storage
- Red Hat Hyperconverged Infrastructure
- Red Hat Ceph Storage
- Red Hat OpenShift Data Foundation
Runtimes
- Red Hat Runtimes
- Red Hat JBoss Enterprise Application Platform
- Red Hat Data Grid
- Red Hat JBoss Web Server
- Red Hat Single Sign On
- Red Hat support for Spring Boot
- Red Hat build of Node.js
- Red Hat build of Thorntail
- Red Hat build of Eclipse Vert.x
- Red Hat build of OpenJDK
- Red Hat build of Quarkus
- Red Hat CodeReady Studio
Integration and Automation
- Red Hat Process Automation
- Red Hat Process Automation Manager
- Red Hat Decision Manager
All Products
Issued:
2022-02-16
Updated:
2022-02-16
RHSA-2022:0483 - Security Advisory
- Overview
- Updated Packages
Synopsis
Important: OpenShift Container Platform 4.8.31 security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
Red Hat OpenShift Container Platform release 4.8.31 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.8.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Description
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.8.31. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHBA-2022:0484
Security Fix(es):
- jenkins-2-plugins/docker-commons: does not sanitize the name of an image
or a tag which could result in an OS command execution (CVE-2022-20617)
- jenkins: no POST request is required for the endpoint handling manual
build requests which could result in CSRF (CVE-2022-20612)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
Affected Products
- Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.8 for RHEL 7 x86_64
- Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x
Fixes
- BZ - 2044460 - CVE-2022-20612 jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF
- BZ - 2044502 - CVE-2022-20617 jenkins-2-plugins/docker-commons: does not sanitize the name of an image or a tag which could result in an OS command execution
Red Hat OpenShift Container Platform 4.8 for RHEL 8
SRPM
containers-common-1-15.rhaos4.8.el8.src.rpm
SHA-256: 0d65bda05483b4bf5c48900ffc4e17e3769c0762ae5884993844a588c1683c46
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.src.rpm
SHA-256: 82d09107c7435d8f0ec6ee203344b72986762ffa38aab55a637930a59d05a1ab
jenkins-2-plugins-4.8.1643649345-1.el8.src.rpm
SHA-256: 62fa0aef763fb113cf80c2ffe46ff0eee1226f8a1b0fa793cc3bac23ad41f1ab
jenkins-2.319.2.1643648617-1.el8.src.rpm
SHA-256: dd24607821ea78a8eae0df774bdc4d23a5a530022512ed30810f2fb66591da99
openshift-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.src.rpm
SHA-256: 6ab4c078a43d2c4a8614657b2e8c77abbcaa2ec7e6751afebef6fad2418b4506
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.src.rpm
SHA-256: 7677f7005859eb89ebec59d9ba8327d556a0397343709cfc6dc0d76d1702c90e
x86_64
containers-common-1-15.rhaos4.8.el8.noarch.rpm
SHA-256: a5e6fdecf8db41a90a82d5306c10bcf409f60911451c27be63252ed58f8b5050
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.x86_64.rpm
SHA-256: 99762b589eb229fd39ef51af3d1c9ff5b0d1d31896846a24c9d71ee7afa872b6
cri-o-debuginfo-1.21.4-10.rhaos4.8.gitc058478.el8.x86_64.rpm
SHA-256: c076cf159447adf57f6d95d3e408c1d2559f2b6586fbb1e1d0e1a68564fa2017
cri-o-debugsource-1.21.4-10.rhaos4.8.gitc058478.el8.x86_64.rpm
SHA-256: 8161947a5f760892de503bc97cdd37170b4b8042b82a06f1792360e46d11ed6a
jenkins-2-plugins-4.8.1643649345-1.el8.noarch.rpm
SHA-256: e8755c603e4c0e8d8f11aec1678f2a358d1a9834e3f20c9f61a2fb64e58e1288
jenkins-2.319.2.1643648617-1.el8.noarch.rpm
SHA-256: 9517667e1acce4ec9399d33dc88fe98e5dc781ff6bff12701955af94efac41e2
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.x86_64.rpm
SHA-256: d0536e4430df0384f1eec31c90da2cbfe7f7fa614eb352a6471241f55ea89fd2
openshift-clients-redistributable-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.x86_64.rpm
SHA-256: 298db5945327c12ffdc69323ce308ebf3b48dc1e9745176069378d0dae9e1328
openshift-hyperkube-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.x86_64.rpm
SHA-256: b7496f950af9ec731312934814aa655c0d1be96f86da1b50fbd4b001111b8595
Red Hat OpenShift Container Platform 4.8 for RHEL 7
SRPM
cri-o-1.21.4-10.rhaos4.8.gitc058478.el7.src.rpm
SHA-256: b37a31392f3724a0c55bf8b66791d4ddbea45a3e19f2c1cd1990b50e92474501
openshift-4.8.0-202202050715.p0.gb82a451.assembly.stream.el7.src.rpm
SHA-256: 4bc96881e2696c1a9812d7395ff6d68dd4066f5515af526d690bec5764c5271f
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el7.src.rpm
SHA-256: f9d45065c8ead916834b8d1af746632cf0ac079f4cd2defd0bb93cb47d935156
x86_64
cri-o-1.21.4-10.rhaos4.8.gitc058478.el7.x86_64.rpm
SHA-256: d52bd2bfa2d11d97591b3c3d4630363832cf972b0d64b6bdd073b2c453e1d412
cri-o-debuginfo-1.21.4-10.rhaos4.8.gitc058478.el7.x86_64.rpm
SHA-256: 94d047cf39c0ed6acd1ccf2f8999f64d3aadc60ce9a8599516449f82d62158fe
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el7.x86_64.rpm
SHA-256: 60805499bcd06761cba5a75b4c16dab5bd74e01b4ea70a9e762e7970da57769d
openshift-clients-redistributable-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el7.x86_64.rpm
SHA-256: 77378d682b4b5357ae8b45ee8bcfab0e542be65bd8aa95d5a7d5b72bf8e7dd10
openshift-hyperkube-4.8.0-202202050715.p0.gb82a451.assembly.stream.el7.x86_64.rpm
SHA-256: da16254f59d4d7bd4fa6afbfcb2719195a48a0efdb82069bdc14e406ab3bf4e6
Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8
SRPM
containers-common-1-15.rhaos4.8.el8.src.rpm
SHA-256: 0d65bda05483b4bf5c48900ffc4e17e3769c0762ae5884993844a588c1683c46
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.src.rpm
SHA-256: 82d09107c7435d8f0ec6ee203344b72986762ffa38aab55a637930a59d05a1ab
jenkins-2-plugins-4.8.1643649345-1.el8.src.rpm
SHA-256: 62fa0aef763fb113cf80c2ffe46ff0eee1226f8a1b0fa793cc3bac23ad41f1ab
jenkins-2.319.2.1643648617-1.el8.src.rpm
SHA-256: dd24607821ea78a8eae0df774bdc4d23a5a530022512ed30810f2fb66591da99
openshift-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.src.rpm
SHA-256: 6ab4c078a43d2c4a8614657b2e8c77abbcaa2ec7e6751afebef6fad2418b4506
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.src.rpm
SHA-256: 7677f7005859eb89ebec59d9ba8327d556a0397343709cfc6dc0d76d1702c90e
ppc64le
containers-common-1-15.rhaos4.8.el8.noarch.rpm
SHA-256: a5e6fdecf8db41a90a82d5306c10bcf409f60911451c27be63252ed58f8b5050
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.ppc64le.rpm
SHA-256: c6be01a80a4d4a9af52358b099d1c708b1415cde0d3ca3457a1bb0064ff79c96
cri-o-debuginfo-1.21.4-10.rhaos4.8.gitc058478.el8.ppc64le.rpm
SHA-256: f3542e1bb7b809773d072f323c242814a0da0f8366f1b8aceb6f6ec2c8581768
cri-o-debugsource-1.21.4-10.rhaos4.8.gitc058478.el8.ppc64le.rpm
SHA-256: d4eef2ca00fb9b55e301c7d9fa80dc3197aeec38d1941c43571f79ca52841df5
jenkins-2-plugins-4.8.1643649345-1.el8.noarch.rpm
SHA-256: e8755c603e4c0e8d8f11aec1678f2a358d1a9834e3f20c9f61a2fb64e58e1288
jenkins-2.319.2.1643648617-1.el8.noarch.rpm
SHA-256: 9517667e1acce4ec9399d33dc88fe98e5dc781ff6bff12701955af94efac41e2
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.ppc64le.rpm
SHA-256: 5b48149b92e14442362ebf8a9edce34283a53626d6948065d6a7ebaa591ddfaa
openshift-hyperkube-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.ppc64le.rpm
SHA-256: 372afafa489682374ae565d2f62847cbc27087ac5757e213a542c7ca32adcd59
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8
SRPM
containers-common-1-15.rhaos4.8.el8.src.rpm
SHA-256: 0d65bda05483b4bf5c48900ffc4e17e3769c0762ae5884993844a588c1683c46
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.src.rpm
SHA-256: 82d09107c7435d8f0ec6ee203344b72986762ffa38aab55a637930a59d05a1ab
jenkins-2-plugins-4.8.1643649345-1.el8.src.rpm
SHA-256: 62fa0aef763fb113cf80c2ffe46ff0eee1226f8a1b0fa793cc3bac23ad41f1ab
jenkins-2.319.2.1643648617-1.el8.src.rpm
SHA-256: dd24607821ea78a8eae0df774bdc4d23a5a530022512ed30810f2fb66591da99
openshift-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.src.rpm
SHA-256: 6ab4c078a43d2c4a8614657b2e8c77abbcaa2ec7e6751afebef6fad2418b4506
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.src.rpm
SHA-256: 7677f7005859eb89ebec59d9ba8327d556a0397343709cfc6dc0d76d1702c90e
s390x
containers-common-1-15.rhaos4.8.el8.noarch.rpm
SHA-256: a5e6fdecf8db41a90a82d5306c10bcf409f60911451c27be63252ed58f8b5050
cri-o-1.21.4-10.rhaos4.8.gitc058478.el8.s390x.rpm
SHA-256: 5e67421548a9eef16d4fbee3e5288a755a7f8f32b034c9202d39fefe1b27d797
cri-o-debuginfo-1.21.4-10.rhaos4.8.gitc058478.el8.s390x.rpm
SHA-256: 73b6dae7a3b56a9cd9cf1837b75ab1915368bd44edbdd54f6e6d8c90f4629201
cri-o-debugsource-1.21.4-10.rhaos4.8.gitc058478.el8.s390x.rpm
SHA-256: 7615b37dda1b75e5185bdfbaed3c3ad0bc5a84d360a531b06cc6be42461e55f5
jenkins-2-plugins-4.8.1643649345-1.el8.noarch.rpm
SHA-256: e8755c603e4c0e8d8f11aec1678f2a358d1a9834e3f20c9f61a2fb64e58e1288
jenkins-2.319.2.1643648617-1.el8.noarch.rpm
SHA-256: 9517667e1acce4ec9399d33dc88fe98e5dc781ff6bff12701955af94efac41e2
openshift-clients-4.8.0-202202071729.p0.g9aacc90.assembly.stream.el8.s390x.rpm
SHA-256: 7961967d0a95b906cfde80025adba2c9a4d1fb07f47d891674723ee2c98e3bfb
openshift-hyperkube-4.8.0-202202050715.p0.gb82a451.assembly.stream.el8.s390x.rpm
SHA-256: 3fa75dd2e51699277238b0270544144501e004b623ded9f79b2a5250e17fb61e
The Red Hat security contact is [email protected]. More contact details at https://access.redhat.com/security/team/contact/.