Back to bug 2152703

Who When What Removed Added
Sage McTaggart 2022-12-12 18:26:45 UTC CC bbuckingham, bcoca, bcourt, btotty, cluster-maint, cwelton, davidn, ehelms, epacific, gotmax, infra-sig, jcammara, jhardy, jneedle, jobarker, jsherril, lzap, mabashia, mhulan, myarboro, nmoumoul, oalbrigt, orabin, osapryki, pcreech, rchan, simaishi, smcdonal, teagle, yguenane, zsadeh
Sage McTaggart 2022-12-12 18:50:03 UTC CC dfreiber, jburrell, rogbas, vkumar
Sage McTaggart 2022-12-12 18:51:33 UTC CC dffrench, gzaronik, jwon, ngough, rgodfrey
Sandipan Roy 2022-12-13 04:18:31 UTC Depends On 2152788
Avinash Hanwate 2022-12-13 07:15:45 UTC CC bbuckingham, bcoca, bcourt, btotty, cwelton, davidn, ehelms, epacific, jcammara, jhardy, jneedle, jobarker, jsherril, lzap, mabashia, mhulan, myarboro, nmoumoul, orabin, osapryki, pcreech, rchan, simaishi, smcdonal, teagle, yguenane, zsadeh
Summary CVE-2022-4318 openshift: /etc/passwd tampering privesc CVE-2022-4318 cri-o: /etc/passwd tampering privesc
Anten Skrabec 2022-12-21 18:24:26 UTC Depends On 2155653, 2155654
Anten Skrabec 2022-12-21 22:49:32 UTC Comment 0 updated
Anten Skrabec 2022-12-21 22:54:30 UTC Doc Text A vulnerability was found in cri-o that allowed the adding of arbitrary lines into /etc/passwd by use of a specially crafted environment variable .
Anten Skrabec 2022-12-21 22:57:43 UTC Depends On 2155696, 2155693, 2155694, 2155695, 2155699, 2155698, 2155700, 2155697
Paige Jung 2022-12-22 16:27:07 UTC Doc Text A vulnerability was found in cri-o that allowed the adding of arbitrary lines into /etc/passwd by use of a specially crafted environment variable . A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.
Anten Skrabec 2022-12-22 19:14:42 UTC CC joelsmith
errata-xmlrpc 2023-03-07 10:47:17 UTC Link ID Red Hat Product Errata RHSA-2023:1033
Product Security DevOps Team 2023-03-07 19:11:40 UTC Resolution --- ERRATA
Status NEW CLOSED
Last Closed 2023-03-07 19:11:40 UTC
errata-xmlrpc 2023-04-04 11:42:43 UTC Link ID Red Hat Product Errata RHSA-2023:1503

Back to bug 2152703