RHBA-2022:8538 - Bug Fix Advisory

Topic

An updated openshift-compliance-operator image that fixes various bugs and/or enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.

Description

The openshift-compliance-operator image update is available with the following changes:

https://docs.openshift.com/container-platform/4.11/security/compliance_operator/compliance-operator-release-notes.html

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.7 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64

Fixes

• OCPBUGS-3252 - Multiarch Support for PCI Profiles not showing correctly
• OCPBUGS-3401 - Startup memory increase and slow leak leading to OOM with 0.1.57 release
• OCPBUGS-3452 - CO 0.1.57 upgrade removes the "rerunner" service Account

CVEs

• CVE-2016-3709
• CVE-2020-35525
• CVE-2020-35527
• CVE-2021-40528
• CVE-2022-1271
• CVE-2022-1292
• CVE-2022-1304
• CVE-2022-1586
• CVE-2022-2068
• CVE-2022-2097
• CVE-2022-2509
• CVE-2022-2526
• CVE-2022-3515
• CVE-2022-22576
• CVE-2022-22624
• CVE-2022-22628
• CVE-2022-22629
• CVE-2022-22662
• CVE-2022-26700
• CVE-2022-26709
• CVE-2022-26710
• CVE-2022-26716
• CVE-2022-26717
• CVE-2022-26719
• CVE-2022-27774
• CVE-2022-27776
• CVE-2022-27782
• CVE-2022-29824
• CVE-2022-30293
• CVE-2022-32206
• CVE-2022-32208
• CVE-2022-34903
• CVE-2022-37434
• CVE-2022-42898

References

(none)