{
  "cveId": "CVE-2022-29224",
  "url": "https://patchblox.com/security/cve/CVE-2022-29224",
  "summary": "CVE-2022-29224 is fixed in 22 products on 1 platform, first by ELSA-2022-9586, released July 11, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "cri-o: olcne\n[1.5.4-3]\n- Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over...",
  "description": "olcne\n[1.5.4-3]\n- Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over\n\n[1.5.4-2]\n- Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227\n\n[1.5.4-1]\n- Upgrade Kubernetes to 1.23.7\n\n[1.5.3-1]\n- Address qemu CVE-2022-26353, CVE-2021-3748\n\n[1.5.2-1]\n- Excluded unnecessary directories from k8s backup files\n\n[1.5.1-1]\n- Fixed the bug in fetching node metadata for non-cloud nodes\n\n[1.5.0-2]\n- Upgrade Helm to 3.7.1-2\n\n[1.5.0-2]\n- fix null pointer exception in systemd service state validation\n\n[1.5.0-1]\n- Introduce support for compact Kubernetes clusters\n- Introduce MetalLB\n- Introduce Oracle Cloud Infrastructure Cloud Controller Manager\n- Improved log messages in Platform API Server and Platform Agent\n- Upgrade Kubernetes to 1.22.8\n- Upgrade Istio to 1.13.2\n- Renamed the oci-csi module to oci-ccm\n\n[1.5.0-20.alpha]\n- Update istio-1.13.2 grafana to 7.5.15\n\n[1.5.0-14.alpha]\n- Metallb fix\n\n[1.5.0-11.alpha]\n- Remove module directories when olcne rpm is uninstalled\n\n[1.5.0-10.alpha]\n- OCI CCM 0.13.0\n\n[1.5.0-9.alpha]\n- Reworked log messages\n\n[1.5.0-8.alpha]\n- Update Istio to 1.13.2(prometheus-2.31.1, grafana-8.4.6)\n\n[1.5.0-7.alpha]\n- Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15)\n\n[1.5.0-6.alpha]\n- Update to k8s 1.22 with golang 1.17\n\n[1.5.0-5.alpha]\n- Update internal docs for oci-ccm module\n\n[1.5.0-4.alpha]\n- Extend oci-ccm module to support load balancer\n\n[1.5.0-3.alpha]\n- Firewall pre-req\n\n[1.5.0-2.alpha]\n- Ensure that config map settings needed by metallb is preserved during k8s upgrade\n\n[1.5.0-1.alpha]\n- Metallb module\n\n[1.4.1-14]\n- Added 1.4 extra images to registry-image-helper.sh script\n\n[1.4.1-13]\n- Update sudoers file and changed its permissions to \u00270440\u0027\n\n[1.4.1-12]\n- Update olcne-kubernetes.md file for \u0027compact\u0027 flag\n\n[1.4.1-11]\n- Ensure that the order of items in an upgraded config file is stable with respect to the original file\n\n[1.4.1-10]\n- Ensure that old olcnectl config files are upgraded\n\n[1.4.1-9]\n- Rename oci-csi module to oci-ccm and add support for oci-ccm loadbalancer creation\n\n[1.4.1-8]\n- Make \u0027compact\u0027 flag updatable\n\n[1.4.1-7]\n- Introduce \u0027compact\u0027 that enables control-plane nodes to run any workloads\n\n[1.4.1-6]\n- Ability to label 1 or more kubernetes nodes\n\n[1.4.1-5]\n- Fixed a bug where specifying a port in the container-registry argument\n  to the Kubernetes module would result in pods not being able to start.\n\n[1.4.1-4]\n- Update helm to 3.7.1\n\n[1.4.1-3]\n- Update versions to Istio-1.12.2, prometheus-2.31.1 and grafana-7.5.11\n\n[1.4.1-2]\n- Allow loadbalancer to be configured regardless of security list mode\n\n[1.4.0-4]\n- Fix bug in initialising certs manager when environment name not mentioned\n\n[1.4.0-3]\n- Fix bug in fetching report for multi-environment\n\n[1.4.0-2]\n- Pause image is 3.4.1\n\n[1.4.0-1]\n- CSI plugin\n- Reports feature\n- Kubernetes-1.20.6 to Kubernetes-1.21.6 upgrade\n- Istio-1.9.4 to Istio-1.11.4 upgrade\n- Component upgrades\n- Config file feature\n\n[1.3.0-13]\n- Fix iptables issue when running on OL7 host using OL8 image\n\n[1.3.0-12]\n- Address CVE\u0027s ISTIO-SECURITY-2021-003, ISTIO-SECURITY-2021-005, ISTIO-SECURITY-2021-006, ISTIO-SECURITY-2021-007\n\n[1.3.0-11]\n- Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282]\n\n[1.3.0-10]\n- Fixed missing double semicolon in registry image helper\n\n[1.3.0-9]\nistio\n[1.13.5-1]\n- Added Oracle specific files for 1.13.5-1\n\nkubernetes\n[1.23.7-1]\n- Added Oracle specific build files for Kubernetes\n\ncri-tools\n[1.23.0-1]\n- Added Oracle Specific Build Files for cri-tools\n\ncri-o\n[1.23.3-1]\n- Added Oracle Specifile Files for cri-o\n\nkata\n[1.12.1-5]\n- updated cri-o and cri-tools versions to support kubernetes-1.23\n\n[1.12.1-4]\n- update kata-image versions\n- update kernel-uek-container version to kernel-uek-container-5.4.17-2136.306.1.3\n\n[1.21.1-3]\n- Support k8s 1.21.6\n- updated kernel-uek-container version\n- updated kata-image versions\n- added buildhost variable\n\n[1.12.1-2]\n- Golang 1.15.9\n\n[1.12.1-1]\n- Updated to kata 1.12.1\n- Updated guest kernel (kernel-uek-container) minimum version to UEK6U2 (5.4.17-2102.200.7)\n\netcd\n[3.5.1-2]\n- Updated THIRD_PARTY_LICENSES.txt file\n\n[3.5.1-1]\n- Added Oracle specific build files",
  "published": "2022-07-11T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 5.9,
  "epss": 0.01038,
  "epssPercentile": 0.64153,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cri-o",
      "release": "ol 8",
      "fixedVersion": "0:1.23.3-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cri-tools",
      "release": "ol 8",
      "fixedVersion": "0:1.23.0-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "etcd",
      "release": "ol 8",
      "fixedVersion": "0:3.5.1-2.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "istio",
      "release": "ol 8",
      "fixedVersion": "0:1.13.5-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "istio-istioctl",
      "release": "ol 8",
      "fixedVersion": "0:1.13.5-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata",
      "release": "ol 8",
      "fixedVersion": "0:1.12.1-5.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubeadm",
      "release": "ol 8",
      "fixedVersion": "0:1.23.7-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubectl",
      "release": "ol 8",
      "fixedVersion": "0:1.23.7-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubelet",
      "release": "ol 8",
      "fixedVersion": "0:1.23.7-1.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-agent",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-api-server",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-gluster-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-grafana-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-istio-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-metallb-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-nginx",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-oci-ccm-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-oci-csi-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.4.6-2.el8",
      "fix": "ELSA-2022-9586",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9586",
      "released": "2022-07-11T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-olm-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-prometheus-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-utils",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcnectl",
      "release": "ol 8",
      "fixedVersion": "0:1.5.4-3.el8",
      "fix": "ELSA-2022-9588",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-9588",
      "released": "2022-07-12T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}