Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:0697
HistoryFeb 15, 2023 - 3:39 p.m.

(RHSA-2023:0697) Important: OpenShift Container Platform 4.10.52 security update

2023-02-1515:39:07
access.redhat.com
25

0.008 Low

EPSS

Percentile

81.7%

JSON

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.10.52. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2023:0698

Security Fix(es):

  • SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  • jenkins: Observable timing discrepancy allows determining username validity (CVE-2022-34174)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

OSVersionArchitecturePackageVersionFilename
RedHat8noarchpython3-sushy-tests< 4.1.5-0.20221125154417.ff95176.el8python3-sushy-tests-4.1.5-0.20221125154417.ff95176.el8.noarch.rpm
RedHat8aarch64atomic-openshift-service-idler< 4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8atomic-openshift-service-idler-4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8.aarch64.rpm
RedHat8noarchopenshift-ansible< 4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8openshift-ansible-4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8.noarch.rpm
RedHat8noarchopenshift-kuryr-controller< 4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8openshift-kuryr-controller-4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8.noarch.rpm
RedHat8s390xopenshift-clients< 4.10.0-202302072053.p0.gdaed147.assembly.stream.el8openshift-clients-4.10.0-202302072053.p0.gdaed147.assembly.stream.el8.s390x.rpm
RedHat8x86_64atomic-openshift-service-idler< 4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8atomic-openshift-service-idler-4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8.x86_64.rpm
RedHat7x86_64openshift-hyperkube< 4.10.0-202302072053.p0.g8a6bfe4.assembly.stream.el7openshift-hyperkube-4.10.0-202302072053.p0.g8a6bfe4.assembly.stream.el7.x86_64.rpm
RedHat8noarchopenshift-kuryr-common< 4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8openshift-kuryr-common-4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8.noarch.rpm
RedHat8s390xopenshift-hyperkube< 4.10.0-202302072053.p0.g8a6bfe4.assembly.stream.el8openshift-hyperkube-4.10.0-202302072053.p0.g8a6bfe4.assembly.stream.el8.s390x.rpm
RedHat8s390xatomic-openshift-service-idler< 4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8atomic-openshift-service-idler-4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8.s390x.rpm
Rows per page:
1-10 of 281

Related

nessus 31
openvas 2
alpinelinux 1
osv 10
redhatcve 2
cvelist 3
cnvd 1
prion 3
github 3
cve 3
ibm 49
atlassian 3
debiancve 1
redos 1
rocky 2
oraclelinux 1
f5 1
cgr 1
hackerone 1
veracode 1
almalinux 1
redhat 29
ubuntucve 1
githubexploit 1
rapid7blog 1
metasploit 1
packetstorm 1
zdt 1
thn 2
hivepro 1
freebsd 1
qualysblog 5
oracle 5
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.10.52 (RHSA-2023:0697)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.10.52 (RHSA-2023:0697)
2024-01-24 00:00:00
Oracle Linux 8 : ELSA-2022-9058-1: / prometheus-jmx-exporter (ELSA-2022-90581)
2022-12-15 00:00:00
openvas
openvas
Jenkins < 2.356, < 2.332.4 LTS Information Disclosure Vulnerability (SECURITY-2566) - Linux
2022-06-24 00:00:00
Jenkins < 2.356, < 2.332.4 LTS Information Disclosure Vulnerability (SECURITY-2566) - Windows
2022-06-24 00:00:00
alpinelinux
alpinelinux
CVE-2022-34174
2022-06-23 17:15:00
osv
osv
BIT-jenkins-2022-34174
2024-03-06 10:57:20
CVE-2022-34174
2022-06-23 17:15:00
Observable timing discrepancy allows determining username validity in Jenkins
2022-06-24 00:00:31
redhatcve
redhatcve
CVE-2022-34174
2022-08-19 05:15:12
CVE-2022-1471
2022-12-01 15:56:23
cvelist
cvelist
CVE-2022-34174
2022-06-22 14:40:56
CVE-2022-1471 Remote Code execution in SnakeYAML
2022-12-01 10:47:07
CVE-2023-46302 Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization
2023-11-20 08:46:56
cnvd
cnvd
Jenkins user enumeration vulnerability
2022-06-27 00:00:00
prion
prion
Default credentials
2022-06-23 17:15:00
Deserialization of untrusted data
2022-12-01 11:15:00
Design/Logic Flaw
2023-11-20 09:15:00
github
github
Observable timing discrepancy allows determining username validity in Jenkins
2022-06-24 00:00:31
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
Deserialization of Untrusted Data in apache-submarine
2023-11-20 09:30:31
cve
cve
CVE-2022-34174
2022-06-23 17:15:00
CVE-2022-1471
2022-12-01 11:15:00
CVE-2023-46302
2023-11-20 09:15:07
ibm
ibm
Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability in SnakeYaml (CVE-2022-1471)
2023-06-13 13:09:52
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to SnakeYaml code execution (CVE-2022-1471)
2023-02-15 02:59:08
Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to execution of arbitrary code on the system (CVE-2022-1471)
2023-07-17 14:27:18
atlassian
atlassian
RCE (Remote Code Execution) in Bitbucket Data Center and Server - CVE-2022-1471
2023-09-19 20:41:22
RCE (Remote Code Execution) in - CVE-2022-1471
2023-10-08 08:44:33
RCE (Remote Code Execution) in Confluence Data Center and Server - CVE-2022-1471
2023-09-11 21:13:51
debiancve
debiancve
CVE-2022-1471
2022-12-01 11:15:00
redos
redos
ROS-20240514-03
2024-05-14 00:00:00
rocky
rocky
prometheus-jmx-exporter security update
2022-12-15 15:08:09
Satellite 6.13 Release
2023-05-05 15:39:58
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-12-15 00:00:00
f5
f5
K000132638 : SnakeYAML vulnerability CVE-2022-1471
2023-02-16 00:00:00
cgr
cgr
CVE-2022-1471 vulnerabilities
2024-04-30 09:06:13
hackerone
hackerone
Kubernetes: The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML
2022-12-15 19:07:04
veracode
veracode
Remote Code Execution (RCE)
2022-12-02 17:22:00
almalinux
almalinux
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
redhat
redhat
(RHSA-2022:9058) Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
(RHSA-2023:0698) Moderate: OpenShift Container Platform 4.10.52 security update
2023-02-15 15:39:49
(RHSA-2023:1454) Moderate: Red Hat OpenShift GitOps security update
2023-03-23 19:09:39
ubuntucve
ubuntucve
CVE-2022-1471
2022-12-01 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Snakeyaml Project Snakeyaml
2023-03-02 16:33:02
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-10-13 17:03:36
metasploit
metasploit
PyTorch Model Server Registration and Deserialization RCE
2023-10-12 13:27:26
packetstorm
packetstorm
PyTorch Model Server Registration / Deserialization Remote Code Execution
2023-10-13 00:00:00
zdt
zdt
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
2023-10-15 00:00:00
thn
thn
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
2023-10-03 16:24:00
Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution
2023-12-06 09:18:00
hivepro
hivepro
Atlassian Addresses Critical RCE Flaws
2023-12-07 12:45:52
freebsd
freebsd
jenkins -- multiple vulnerabilities
2022-06-22 00:00:00
qualysblog
qualysblog
Oracle Patch Update, April 2024 Security Update Review
2024-04-17 14:39:59
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

0.008 Low

EPSS

Percentile

81.7%

JSON
Related for RHSA-2023:0697
nessus31openvas2alpinelinux1osv10redhatcve2cvelist3cnvd1prion3github3cve3ibm49atlassian3debiancve1redos1rocky2oraclelinux1f51cgr1hackerone1veracode1almalinux1redhat29ubuntucve1githubexploit1rapid7blog1metasploit1packetstorm1zdt1thn2hivepro1freebsd1qualysblog5oracle5