RHSA-2024:0325HighCVSS 9.8
Red Hat Security Advisory: Updated RHEL-7-based Middleware container images
🔗 CVE IDs covered (1)
📋 Description
CVE-2022-1471 — SnakeYaml: Constructor Deserialization Remote Code Execution
🎯 Affected products7
- Middleware RHEL 7 Containers for OpenShift
- openjdk/openjdk-11-rhel7@sha256:394383b5ed1baae3b74783630f57117461611e59ba875e4c16475340372cc779_ppc64le as a component of Middleware RHEL 7 Containers for OpenShift
- openjdk/openjdk-11-rhel7@sha256:7000edba068b22c281737aadb83a96398ce4b748af9269cb050b14459a6e0f9d_amd64 as a component of Middleware RHEL 7 Containers for OpenShift
- openjdk/openjdk-11-rhel7@sha256:ef3b154086d0531662acfca54386a28b44238ee67c355d1dfc56aa74f599c362_s390x as a component of Middleware RHEL 7 Containers for OpenShift
- redhat-openjdk-18/openjdk18-openshift@sha256:39767d06578c94dd2fe9f23189b9f8a58e4eb334ffa35d5ca34bb414340279d4_ppc64le as a component of Middleware RHEL 7 Containers for OpenShift
- redhat-openjdk-18/openjdk18-openshift@sha256:4d8eea38a561b4f41f33bca16ac5b1e2c268cd4a2e9ce4d5ad915df5b1488b1d_s390x as a component of Middleware RHEL 7 Containers for OpenShift
- redhat-openjdk-18/openjdk18-openshift@sha256:72a11a87af9ff2084d7356288c823c7ca9d57b902fb47b404ed7eb7eb2b8974b_amd64 as a component of Middleware RHEL 7 Containers for OpenShift
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2024:0325
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/containers
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2150009
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0325.json