rhba-2023_0030
Vulnerability from csaf_redhat
Published
2023-01-04 21:43
Modified
2024-11-05 16:02
Summary
Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images
Notes
Topic
Updated RHEL-8 based Middleware Containers container images are now available
Details
The RHEL-8 based Middleware Containers container images have been updated to
address the following security advisory: RHSA-2022:9058 (see References)
Users of RHEL-8 based Middleware Containers container images are advised to
upgrade to these updated images, which contain backported patches to correct
these security issues, fix these bugs and add these enhancements. Users of these
images are also encouraged to rebuild all container images that depend on these
images.
You can find images updated by this advisory in Red Hat Container Catalog (see
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated RHEL-8 based Middleware Containers container images are now available",
"title": "Topic"
},
{
"category": "general",
"text": "The RHEL-8 based Middleware Containers container images have been updated to\naddress the following security advisory: RHSA-2022:9058 (see References)\n\nUsers of RHEL-8 based Middleware Containers container images are advised to\nupgrade to these updated images, which contain backported patches to correct\nthese security issues, fix these bugs and add these enhancements. Users of these\nimages are also encouraged to rebuild all container images that depend on these\nimages.\n\nYou can find images updated by this advisory in Red Hat Container Catalog (see",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2023:0030",
"url": "https://access.redhat.com/errata/RHBA-2023:0030"
},
{
"category": "external",
"summary": "https://access.redhat.com/containers",
"url": "https://access.redhat.com/containers"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2022-",
"url": "https://access.redhat.com/security/cve/CVE-2022-"
},
{
"category": "external",
"summary": "https://access.redhat.com/errata/RHSA-2022:9058",
"url": "https://access.redhat.com/errata/RHSA-2022:9058"
},
{
"category": "external",
"summary": "OPENJDK-1353",
"url": "https://issues.redhat.com/browse/OPENJDK-1353"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_0030.json"
}
],
"title": "Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images",
"tracking": {
"current_release_date": "2024-11-05T16:02:47+00:00",
"generator": {
"date": "2024-11-05T16:02:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHBA-2023:0030",
"initial_release_date": "2023-01-04T21:43:37+00:00",
"revision_history": [
{
"date": "2023-01-04T21:43:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-01-04T21:43:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-05T16:02:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Middleware Containers for OpenShift",
"product": {
"name": "Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhosemc:1.0::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"product": {
"name": "ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"product_id": "ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-11-runtime\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"product": {
"name": "ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"product_id": "ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-11\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"product": {
"name": "ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"product_id": "ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-17-runtime\u0026tag=1.14-8"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"product": {
"name": "ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"product_id": "ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-17\u0026tag=1.14-9"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"product": {
"name": "ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"product_id": "ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-8-runtime\u0026tag=1.14-10"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"product": {
"name": "ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"product_id": "ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86?arch=ppc64le\u0026repository_url=registry.redhat.io/ubi8/openjdk-8\u0026tag=1.14-12"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"product": {
"name": "ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"product_id": "ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-11-runtime\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"product": {
"name": "ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"product_id": "ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-11\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"product": {
"name": "ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"product_id": "ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-17-runtime\u0026tag=1.14-8"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"product": {
"name": "ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"product_id": "ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-17\u0026tag=1.14-9"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"product": {
"name": "ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"product_id": "ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-8-runtime\u0026tag=1.14-10"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"product": {
"name": "ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"product_id": "ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef?arch=s390x\u0026repository_url=registry.redhat.io/ubi8/openjdk-8\u0026tag=1.14-12"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"product": {
"name": "ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"product_id": "ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-11-runtime\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"product": {
"name": "ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"product_id": "ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-11\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"product": {
"name": "ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"product_id": "ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-17-runtime\u0026tag=1.14-8"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"product": {
"name": "ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"product_id": "ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-17\u0026tag=1.14-9"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"product": {
"name": "ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"product_id": "ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-8-runtime\u0026tag=1.14-10"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"product": {
"name": "ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"product_id": "ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40?arch=arm64\u0026repository_url=registry.redhat.io/ubi8/openjdk-8\u0026tag=1.14-12"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"product": {
"name": "ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"product_id": "ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-11-runtime\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"product": {
"name": "ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"product_id": "ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-11\u0026tag=1.14-11"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"product": {
"name": "ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"product_id": "ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-17-runtime\u0026tag=1.14-8"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"product": {
"name": "ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"product_id": "ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-17\u0026tag=1.14-9"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"product": {
"name": "ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"product_id": "ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-8-runtime\u0026tag=1.14-10"
}
}
},
{
"category": "product_version",
"name": "ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64",
"product": {
"name": "ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64",
"product_id": "ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3?arch=amd64\u0026repository_url=registry.redhat.io/ubi8/openjdk-8\u0026tag=1.14-12"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le"
},
"product_reference": "ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x"
},
"product_reference": "ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64"
},
"product_reference": "ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64"
},
"product_reference": "ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x"
},
"product_reference": "ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64"
},
"product_reference": "ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64"
},
"product_reference": "ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le"
},
"product_reference": "ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le"
},
"product_reference": "ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64"
},
"product_reference": "ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64"
},
"product_reference": "ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x"
},
"product_reference": "ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64"
},
"product_reference": "ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64"
},
"product_reference": "ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le"
},
"product_reference": "ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x"
},
"product_reference": "ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64"
},
"product_reference": "ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64"
},
"product_reference": "ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le"
},
"product_reference": "ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x"
},
"product_reference": "ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le"
},
"product_reference": "ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64"
},
"product_reference": "ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x"
},
"product_reference": "ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64"
},
"product_reference": "ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-1471",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2022-12-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2150009"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SnakeYaml package. This flaw allows an attacker to benefit from remote code execution by sending malicious YAML content and this content being deserialized by the constructor. Deserialization is unsafe and leads to Remote Code Execution (RCE).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SnakeYaml: Constructor Deserialization Remote Code Execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the Red Hat Process Automation 7 (RHPAM) the untrusted, malicious YAML file for deserialization by the vulnerable Snakeyaml\u0027s SafeConstructor class must be provided intentionally by the RHPAM user which requires high privileges. The potential attack complexity is also high because it depends on conditions that are beyond the attacker\u0027s control. Due to that the impact for RHPAM is reduced to Low.\n\nRed Hat Fuse 7 does not expose by default any endpoint that passes incoming data/request into vulnerable Snakeyaml\u0027s Constructor class nor pass untrusted data to this class. When this class is used, it\u2019s still only used to parse internal configuration, hence the impact by this vulnerability to Red Hat Fuse 7 is reduced to Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-1471"
},
{
"category": "external",
"summary": "RHBZ#2150009",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2150009"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-1471",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1471"
},
{
"category": "external",
"summary": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
"url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"
}
],
"release_date": "2022-10-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-01-04T21:43:37+00:00",
"details": "The RHEL-8 based Middleware Containers container images provided by this update\ncan be downloaded from the Red Hat Container Registry at\nregistry.access.redhat.com. Installation instructions for your platform are\navailable at Red Hat Container Catalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image\nspecifically, or to the latest image generally.",
"product_ids": [
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2023:0030"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:08d98e77b1131ad2babe9ef2fd26e6d6c1a4f53afd7f51557959d65ce6d840f2_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:50e22e8e349db230939dd144ff989f52f9df13cbd3a7e16fc580105f4432cfb2_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:a2317c1c052c94d9b0d70757af46800c95f8024be00c5b0e8982f4e696a2f7cf_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11-runtime@sha256:c79237560e8c17f0de5efd3e922bd93dc9294aee8973ab082ec92b76f929de2f_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:69b8a89bf7c54ef9db0b85348e6c180ead1258539ffc586c83d868c39e623732_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:aee3afd2f882df01a1e4395da7d7b9e13ec448287706d5f5184e1ef34dbfe932_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d1d07f0efbffc927f884f99429dd4d12b86e88b522399e0e649632ecce57d7c4_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-11@sha256:d25564db8ec62f4d0bc77ea8732d8c0c60ae00237c0b46caa53f6bd0e07cf0d9_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:7f92b65ecd3cbd9cb68db06e9ade57ea2960baf8476b5eeb7a360d8e0bf8a0a6_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:92d01fa958a819064e3a9ff68e0b47353c7291d8fac390da962745b2c6ed3ec5_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:9f51c5857f750ebdaac53f7063971be7bdfdb594c057ed1958f5011f5de8c54d_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17-runtime@sha256:f0dc5766c0fb00bab4a382da2d4803ffab704c7af295148cf0053e4c7501cf8a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:1a3fa7b0b11e3f87cb1a6645be91a2d0d90ec61d79578350b4ce799a53944979_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:45cab7a406e4a96ab982e97dec56255ff29748a14d4452bf7eefcc30f0e9b448_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:4fb81dcf6bc8b6c5f1be1f65e8d4fca46b5198efe1c41438f26679682353017c_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-17@sha256:dd45b6c53bcc1ae5b5dc8f46be136f2d1360608988dabf8a1aec9e162ce8211a_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:081fc23822d1560d8a9d4915464b9866d9d26b5a55ba84177c09a089bb49a7ff_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:19a6317298f417fbb7536761058a6a5d54411e680062bb58e3bed30356fea3c6_amd64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:25a5f784d69920f337df04f2063d2c2e01e77511c8c4f33910afe17a765b9a6e_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8-runtime@sha256:c2c984bdc5cac41fe1a6dc51f74f0e7677ac63d8a55bad999d70ebc5bff93713_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:516da99d2ef853fff66e30add9cca8dbdc3300250d354a4d5e46edd19b027a86_ppc64le",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:758f43731efdd7b2fa1a118113329d70d29e211c7ecc4ceab90cf0a056f0fc40_arm64",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:a43a8ff8b7ad9c4f407e8360abb3b688d9e6d182fdb8c50065a78ff977349eef_s390x",
"8Base-RHOSE-Middleware:ubi8/openjdk-8@sha256:f7cd7dd85329cb0304ed0d19d9a7e5fecd3750f0621f5b6241853d93f465bdb3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "SnakeYaml: Constructor Deserialization Remote Code Execution"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.