What is RHBA-2023:1649?

RHBA-2023:1649 is a security advisory published by Red Hat Product Security with High severity. Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.35 packages and security update

Which CVE IDs does RHBA-2023:1649 cover?

RHBA-2023:1649 covers the following CVE IDs: CVE-2021-38561, CVE-2023-25725. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHBA-2023:1649?

RHBA-2023:1649 has a CVSS v3 base score of 8.2, published by Red Hat Product Security.

Which products are affected by RHBA-2023:1649?

RHBA-2023:1649 affects 51 products, including: Red Hat OpenShift Container Platform 4.11; cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11; cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11; cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11; cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.src as a component of Red Hat OpenShift Container Platform 4.11; and others — see the full list on the advisory page.

RHBA-2023:1649HighCVSS 8.2

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.35 packages and security update

Vendor

Red Hat Product Security

Published

April 12, 2023

Last Modified

August 7, 2026

🔗 CVE IDs covered (2)

CVE-2021-38561 →CVE-2023-25725 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2023-25725 — haproxy: request smuggling attack in HTTP/1 header parsing

🎯 Affected products51

Red Hat OpenShift Container Platform 4.11
cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.src as a component of Red Hat OpenShift Container Platform 4.11
cri-o-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debuginfo-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debuginfo-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debuginfo-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debuginfo-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debugsource-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debugsource-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debugsource-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
cri-o-debugsource-0:1.24.5-2.rhaos4.11.gitb007cb6.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy-0:2.2.24-3.rhaos4.11.el8.src as a component of Red Hat OpenShift Container Platform 4.11
haproxy-debugsource-0:2.2.24-3.rhaos4.11.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy-debugsource-0:2.2.24-3.rhaos4.11.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
haproxy-debugsource-0:2.2.24-3.rhaos4.11.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
haproxy-debugsource-0:2.2.24-3.rhaos4.11.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-0:2.2.24-3.rhaos4.11.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-0:2.2.24-3.rhaos4.11.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-0:2.2.24-3.rhaos4.11.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-0:2.2.24-3.rhaos4.11.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-debuginfo-0:2.2.24-3.rhaos4.11.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-debuginfo-0:2.2.24-3.rhaos4.11.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-debuginfo-0:2.2.24-3.rhaos4.11.el8.s390x as a component of Red Hat OpenShift Container Platform 4.11
haproxy22-debuginfo-0:2.2.24-3.rhaos4.11.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
kernel-rt-0:4.18.0-372.51.1.rt7.208.el8_6.src as a component of Red Hat OpenShift Container Platform 4.11
kernel-rt-0:4.18.0-372.51.1.rt7.208.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
kernel-rt-core-0:4.18.0-372.51.1.rt7.208.el8_6.x86_64 as a component of Red Hat OpenShift Container Platform 4.11
+21 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products51

✅ Remediation

🔗 References (3)