RHSA-2023:0778MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update

Published
February 22, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2022-3064 →

📋 Description

CVE-2022-3064 — go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:1bbd12abaae644e63c6ac9cde5ba64d462176a2e2c1c24f3831c7b274526e129_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:3f5dca9e9d09fead9dbe7928744e303d8c29251d15872fe62cc5c51cea4b700c_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:9ac02ed7231c454149879823391c06041f76c8fcedcbfa71d55eebfa3c6467f4_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/driver-toolkit-rhel8@sha256:f4329626c808db2ed879af4c609b1fe0037c2b8561266c207ef857ab47f50b57_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-alt-rhel8@sha256:2296a648ee0f82c1f3b2be37c5d04bed46bbac52fcc59114de7fb0770ab7b38d_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:0ac0d5ffd0e3cc3fa54ca91a1d15c765cb433e835025e3f55299ed5410be3a00_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:895797c012ef8e175e7b4cf61cefe2289e468b4ad704de6ab7ed130d9f59c26a_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:9b1cff0b508d64303aec2ad651e7e2c8eaa87b8deea60612b9f0a2a9cf3b987b_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/egress-router-cni-rhel8@sha256:c06a44db79ad0c528c62625d971fd0c6517dba624150df16c55a74e620a754c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:031f56aeca91ac05bd5a709b3565d7a18272deb0bce75583c2187092e3b5c36b_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:619138fa85e164bdbb1467ed120b60f073e4bac2754aeec1a33daae5d949cd6e_s390x as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:e64d125c209bdd7bf0ee85bd118273b9063bd0ed1430ae7fa9c2d1abd4953db4_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/network-tools-rhel8@sha256:f67e2f087d962f4098e31ed6268126a512c273a336ffc295359a5a0786158fcc_ppc64le as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:6b17d4ab2e72db51479ff18caab17cb1bb752fdeb3c852de90551f6f6869d9f2_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:97fd4bff9ca9a19460a8d67ccf37d0bb7a2398087962a29935d9f2c36bf02a42_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:21b086edb9d935b9765711ceb3616fb4431da1c494c5e7746e4ef956a076e8ea_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:82d3b91670dae14dcb700457a01b40f050367a84ad9052f942c6142191cdcd26_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:20b5c5dfdc98f8abe3da1147801ba39350459923bcd100f7909d062fce7c0589_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:d86724778c3881cbc6747dbd3c1d48d7dc15d3b140ccdd80be44b0c873c86922_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-machine-controllers@sha256:5c37ab49b7186a02f3048a6c79ed9dc753463c2d5a48744ec654f0e8c4e9b37b_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-machine-controllers@sha256:71f3eb3d2c4ed22f0b0b2dcef0ff44202c91dffc7ca406190a3a8143c25c2817_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:9ca28db42fc0ff6c058d5c711af31b3159baf18d391735c1fee5153be1ed1725_arm64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:f6e88176b54721f9421d73eb3123bc9fad1af87e149961c02cab1b78e470ac2b_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:f47bfcd342fd41737b8ae3017e0ec5915989029fea1a6e5f13f3211392c9d00a_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-cloud-node-manager-rhel8@sha256:64dfef57edbb71b5919aee501253f6bfbffed21be0e005539f1d247cd4f71747_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:bef22c4c05c575247e208410c1519613dd3c18faa8238ef76d5476f306c84b1a_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:95739aaadb74d1d6fdff3c0ae41e9e270842947b2bb6ebc68ce1e28595990400_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-azure-machine-controllers@sha256:076e0b6d8061f1fbe38568e9ac703df0727b780a1897b8f49dfa7ec5ceddbc1c_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • openshift4/ose-baremetal-installer-rhel8@sha256:2eb686c6803e1e4038013289ead4849bb7ae4ea2227d0d6b626925452f188679_amd64 as a component of Red Hat OpenShift Container Platform 4.9
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The SHA values for the release are listed as follows: (For x86_64 architecture) The image digest is sha256:37b675dfeac56248d99616bab316ed920c822791305337ed25fca51c6eb23de4 (For s390x architecture) The image digest is sha256:0578e8b8c95951143bd4bedba761bc7e76c063acfef5468ba69291e84f38bf5a (For ppc64le architecture) The image digest is sha256:1c2a8864f0502e6959e51771c76c42848355788094004832fa4bf24c2aec5722 (For aarch64 architecture) The image digest is sha256:99a00424a752ac5543144ce965e4045d50fe909eeec4823a9efe6b2e812170e1 All OpenShift Container Platform 4.9 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

🔗 References (11)