RHBA-2023:3611MediumCVSS 7.5
Red Hat Bug Fix Advisory: Release of Bug Advisories for the OpenShift Jenkins and Jenkins agent base image
🔗 CVE IDs covered (1)
📋 Description
CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding
🎯 Affected products9
- OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12
- ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHBA-2023:3611
- externalhttps://docs.openshift.com/container-platform/4.12/cicd/jenkins/important-changes-to-openshift-jenkins-images.html
- externalhttps://issues.redhat.com/browse/OCPBUGS-13652
- externalhttps://issues.redhat.com/browse/OCPBUGS-14393
- externalhttps://issues.redhat.com/browse/OCPBUGS-14642
- externalhttps://issues.redhat.com/browse/OCPBUGS-6632
- externalhttps://issues.redhat.com/browse/OCPBUGS-7016
- externalhttps://issues.redhat.com/browse/OCPBUGS-7017
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_3611.json