RHSA-2023:3218MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.60 security update

Published
May 24, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-3064 →

📋 Description

CVE-2022-3064 — go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents

🎯 Affected products190

  • Red Hat OpenShift Container Platform 4.10
  • openshift-tech-preview/metallb-rhel8@sha256:070f271739d83bcb046d85713c8e3756ad13fcd63b608663a5ffb7830abf75b6_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift-tech-preview/metallb-rhel8@sha256:58532be360acd1dd4b01587664a255762a00e9d0eadafcad4ccab5f2e8daa026_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift-tech-preview/metallb-rhel8@sha256:b47973c5e02666d8b784cfed497221df6e2264fe0871d6576a1ff424e6d4a330_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift-tech-preview/metallb-rhel8@sha256:cdff4d10c886a969cc7a5f33b5450163620f27ebf07cba0a124245163c30d5ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/bare-metal-event-relay-rhel8-operator@sha256:5ac0f1f8397bf714a95c9767bf21bee647524a4b790cdcb19db68cfc6bf3dbe8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/baremetal-hardware-event-proxy-rhel8@sha256:df48fa76c7158cbf4ffb900582d2f107897ab92fdd0dfc44dabe0a06d2620355_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:29f1c1ddbe6e357dcbe18a8498f0c2a44440ba7a643ba72fccca1a0511d30024_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:941ee028574b1826df434689ab83a84301b90f0f1fb281b72b8027d01ec44039_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:965bd481fd0ece0fa998dec33a5225af683c5e80733c0f383612d7508e980254_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/cloud-event-proxy-rhel8@sha256:d18f4a886768b6ff30a982371404a6c35a1f058250bead66d6a2d2e64950aa9d_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/dpu-network-rhel8-operator@sha256:3464e0d090ec637fb101d17befc0ac27108f95caa58e1ae4881aec117e1e5480_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/dpu-network-rhel8-operator@sha256:8e1a902f75010eb9b807e6bb3049e8261cc902f055889f5bc83c362d59f5b84f_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/frr-rhel8@sha256:034b0c7574b17d0fd3d378c43b8db59a8052de0355784ae677c6f10f6d55fa6d_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/frr-rhel8@sha256:5d5bbff138e906afc97788b69be13553822bf5556701eac4bd796875a9998e0b_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/frr-rhel8@sha256:913b5d20f18a85b3398a32a5903896e07aa88fc83ef4243bbc2d599b7f2de3ce_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/frr-rhel8@sha256:926b320b180592a63aad1bf09ed24d22f11bca9930a4a294977e6b8bfd95e6d8_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:042c47c7c59f25cf2de44f0e05238ef628b2532b6a41bbe487afed0f202534e1_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:17420c4c3df166a7690c58abe595e52713118e2f6b8d8aff6d0d69ebeca67cd7_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:1a020d6fbf3f65be5c25be801b0dcc0632d2fe2df1ad7b6951d2ea544af246af_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:4ef9e2bb3438dc6ab4836c6efa8944a5aeac731b18f20515837447d93c41dc53_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:07c39088441997a60a38fc0caa12166ffacf7b8f615a31b88b8264401ea4c9a4_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:630b52ee065b736d49c8fbc5b11edf5bb90f38d034ade069967d054c5d851206_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:7037616c98678c2140b32da43a4a0aae7d5498eb3d97969e5c82cd68b3fef03c_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8-operator@sha256:889b11a955381c1a79b3af68a499eabd4fa11e13a7ba50bd7dfae5d51fb30caf_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8@sha256:070f271739d83bcb046d85713c8e3756ad13fcd63b608663a5ffb7830abf75b6_arm64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8@sha256:58532be360acd1dd4b01587664a255762a00e9d0eadafcad4ccab5f2e8daa026_s390x as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8@sha256:b47973c5e02666d8b784cfed497221df6e2264fe0871d6576a1ff424e6d4a330_amd64 as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/metallb-rhel8@sha256:cdff4d10c886a969cc7a5f33b5450163620f27ebf07cba0a124245163c30d5ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • openshift4/ose-ansible-operator@sha256:1ec33eca3c3257b8b430c07100c5846105bbb43edd99ff7e56e2079783e8989e_ppc64le as a component of Red Hat OpenShift Container Platform 4.10
  • +160 more not shown

✅ Remediation

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html

🔗 References (5)