Red Hat Alert
2666Warning Date
Severity Level
Warning Number
Target Sector
14 April, 2022
● High
2022-4672
All
Description:
Red Hat has released security updates to address several vulnerabilities in the following products, mainly:
- kpatch-patch
- Red Hat Enterprise Linux Server - AUS 7.7 x86_64
- Red Hat Enterprise Linux Server - TUS 7.7 x86_64
- Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.7 ppc64le
- Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.7 x86_64
- Red Hat OpenShift Data Foundation
- Red Hat OpenShift Data Foundation 4 x86_64
- Red Hat OpenShift Data Foundation for IBM Power, little endian 4 ppc64le
- Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 s390x
- Red Hat OpenShift Data Foundation 4 x86_64
- Red Hat OpenShift Data Foundation for IBM Power, little endian 4 ppc64le
- Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 s390x
- OpenShift Container Platform
- Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform for Power 4.7 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.7 for RHEL 8 s390x
Threats:
An attacker could exploit a vulnerability by doing the following:
- Privilege escalation
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates: