RHSA-2024:0325HighCVSS 9.8

Red Hat Security Advisory: Updated RHEL-7-based Middleware container images

Published
January 22, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2022-1471 — SnakeYaml: Constructor Deserialization Remote Code Execution

🎯 Affected products7

  • Middleware RHEL 7 Containers for OpenShift
  • openjdk/openjdk-11-rhel7@sha256:394383b5ed1baae3b74783630f57117461611e59ba875e4c16475340372cc779_ppc64le as a component of Middleware RHEL 7 Containers for OpenShift
  • openjdk/openjdk-11-rhel7@sha256:7000edba068b22c281737aadb83a96398ce4b748af9269cb050b14459a6e0f9d_amd64 as a component of Middleware RHEL 7 Containers for OpenShift
  • openjdk/openjdk-11-rhel7@sha256:ef3b154086d0531662acfca54386a28b44238ee67c355d1dfc56aa74f599c362_s390x as a component of Middleware RHEL 7 Containers for OpenShift
  • redhat-openjdk-18/openjdk18-openshift@sha256:39767d06578c94dd2fe9f23189b9f8a58e4eb334ffa35d5ca34bb414340279d4_ppc64le as a component of Middleware RHEL 7 Containers for OpenShift
  • redhat-openjdk-18/openjdk18-openshift@sha256:4d8eea38a561b4f41f33bca16ac5b1e2c268cd4a2e9ce4d5ad915df5b1488b1d_s390x as a component of Middleware RHEL 7 Containers for OpenShift
  • redhat-openjdk-18/openjdk18-openshift@sha256:72a11a87af9ff2084d7356288c823c7ca9d57b902fb47b404ed7eb7eb2b8974b_amd64 as a component of Middleware RHEL 7 Containers for OpenShift

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)