RHSA-2023:0698MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.52 security update

Published
February 15, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2022-3064 →

📋 Description

CVE-2022-3064 — go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:46e583311428f2b503d6d68feb7dfe3bcf3e534cfde109ba15e3ed79cb049b71_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:789cb15246b44ee871f04f0428ba76bb123baa452b3871fd519e40e7615cf79f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:cf089251b069c647dfb80a086f54905bba3b77069a00c7db7432d66f48a2f58a_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-network-config-controller-rhel8@sha256:efcfb4e3f8d1d704dda2bd9e59d8d4d355846a4e4797093880c777fd4a224492_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:1d57a620e855adf25103eb6ee40096d3e520f9593e9ede3b25a28a41f84f1401_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:2b5252c72af6f014b9547bd256192e1d24ef0063cebed6f42a946623af5e5e83_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:6f9c224853c0b4ae241b4d9bebd84ed2dff9b92fdbd17b79bb750b5a13ede734_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/driver-toolkit-rhel8@sha256:d78d45501bceae460756fca372e68c103130832df3d7f34517861d79de45ea54_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:6691a7a5227d9cdd85584817e75fde69ffb79cd5313dfa84c084a591694b37c8_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:974d6f1a4f0131d695aeb7b3c46ea4f9ce3ecae8da7b02a7045675171ef1d3ff_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:d9cf1209ef2577757eab2b5f507cbfdd71ea6d2a29fe715bf209b921d20ccad4_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/egress-router-cni-rhel8@sha256:e260cddbf205e9a5a8a221f285ceb9ec72222d48cdcf1ea6590385bbc602f84c_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:4f0f5a8679021068ac6e88a66b58759e61e366c3daeef17f363e1f9a413fd274_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:d0a1a011ab7bd3c6ceca244360437d369e72c36fbd31496b82c75c455604da22_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:efeea9cf3b986c9ef2bafcd2778f73c8d4b1265830e6216be28414a3c7800050_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/network-tools-rhel8@sha256:f3683f87b89962514ab2875170d006e8b88d34c7ad9ba2fe1286f4544d3db009_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/oc-mirror-plugin-rhel8@sha256:72e40001f8e10b73c3e8a68096f28a482b9e96dfad1172a3d496303cf1bba811_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:22596de20235bf97567e8da1f9509762e5d87c1627db8a89e766bfc0bf87fe43_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:f8e6ea70126ea5a84e31bb3bc94eee28e63a2861981b3d7ee7570f6c847033dd_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:be4b581b72bc41d2d58d2c52c90af5ea707fb51553276e7ab49a3b2520e9ed09_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:40edad325293f5e557c8076e9739a811f5724a7c0a1d287db71ec6616f59b109_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:68e593a04696948a11c4e860a95a400f99cb12513a4a3846526809ba4fc82624_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:895ef4ff7eecc868591e58d85837aae914a6963ee996d577e4c7658088fa1258_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:1f4b1f30a37433184b141029b3c0deb163dcf01d38ff87b288cc93df40fbbf7c_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:931ef5254ac6303c95e7db5f90a6470f957349e7ef95dd2a3184adc978ddcf76_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:c0df5c4fc46e33a53ca7183ea4b3717a31384bc99bd116e497d2ef7487032bbd_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:d41ebf1207af30b66b0aa370926a785082e87696a2f7711205b24d8f703febe2_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:bd20e15e47e9d21c80cfd28642e257b0a7a88855f91cc8d30e9c2316c0260565_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:e82a84e205171d3ed699e646503e195d5e5c674df963072b3ab03287cddc0305_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:b13ee67469f7f85a1b1daf57424f3c7c02c3a188cb640dc6284742091a7e6d50 (For s390x architecture) The image digest is sha256:4c776be05c475ee885829444509258b486d79d8128e12d6d2263ab7cdef83ce8 (For ppc64le architecture) The image digest is sha256:2d4e0af6ca2afc8c10d210aa520aba602618f3fad4cb42636bddb57b1f0ce425 (For aarch64 architecture) The image digest is sha256:7cadaaf6e0f71645864963e6c47c75852ce68aff80c963dfba2ddf51c0b836c4 All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

🔗 References (24)