Red Hat Alert
3102Warning Date
Severity Level
Warning Number
Target Sector
17 March, 2022
● Medium
2022-4532
All
Red Hat has released security updates to address several vulnerabilities in the following products:
- redhat-ds:11.3
- Red Hat Directory Server 11 x86_64
- expat
- Red Hat Enterprise Linux for x86_64 8 x86_64
- Red Hat Enterprise Linux for IBM z Systems 8 s390x
- Red Hat Enterprise Linux for Power, little endian 8 ppc64le
- Red Hat Enterprise Linux for ARM 64 8 aarch64
- virt:av and virt-devel:av
- Red Hat Enterprise Linux Advanced Virtualization 8 x86_64
- Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM Power LE) 8 ppc64le
- Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for ARM 64) 8 aarch64
- Red Hat Enterprise Linux Advanced Virtualization (for RHEL Server for IBM System Z) 8 s390x
- OpenShift Virtualization 4.10.0
- Red Hat Container Native Virtualization 4.10 for RHEL 8 x86_64
- Red Hat Container Native Virtualization 4.10 for RHEL 7 x86_64
- OpenShift Container
- Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.10 for RHEL 7 x86_64
- Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
- Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
- Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64
An attacker could exploit these vulnerabilities by doing the following:
- Execute Arbitrary Code
- Buffer Overflow
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates: