Database/Container, Kubernetes & orchestration
CRI-O: Shipped OpenShift CRI-O builds regressed the CVE-2022-2995 fix
CVE-2022-3466Container, Kubernetes & orchestrationcurated
Impact
Shipped OpenShift CRI-O builds regressed the CVE-2022-2995 fix; supply-chain style reintroduction of a fixed bug
Who can reach it
Any tenant workload on an affected OCP build
What to do
Verify CRI-O build version explicitly, not just the OCP version; upgrade and drain
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.