(RHSA-2022:5068) Moderate: OpenShift Container Platform 4.11.0 packages and security update

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

Security Fix(es):

• ignition: configs are accessible from unprivileged containers in VMs running on VMware products (CVE-2022-1706)
• prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
• golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString (CVE-2022-23772)
• golang: cmd/go: misinterpretation of branch names can lead to incorrect access control (CVE-2022-23773)
• golang: crypto/elliptic: IsOnCurve returns true for invalid field elements (CVE-2022-23806)
• golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
• golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
• golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
• golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
• runc: incorrect handling of inheritable capabilities (CVE-2022-29162)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.