RHBA-2023:0030HighCVSS 9.8

Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images

Published
January 4, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-1471 →

📋 Description

CVE-2022-1471 — SnakeYaml: Constructor Deserialization Remote Code Execution

🎯 Affected products25

  • Middleware Containers for OpenShift
  • ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64 as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x as a component of Middleware Containers for OpenShift
  • ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64 as a component of Middleware Containers for OpenShift

✅ Remediation

The RHEL-8 based Middleware Containers container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References). Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.

🔗 References (6)