RHSA-2023:0692MediumCVSS 7.5

Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.7 security and bug fix update

Published
February 9, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (2)

CVE-2022-32149 →CVE-2022-41717 →

📋 Description

CVE-2022-32149 — golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products13

  • 8Base-OADP-1.0
  • oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:3749d7386635cf598147d5021584672ab26761b9dca52ca05b179d47557ac549_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-mustgather-rhel8@sha256:f269ee31bf0eb544ccabb2d72d807dc5d6587186d76bb020a00fac20221c7b0f_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-operator-bundle@sha256:d0927b9f279ad60a073773ec624dc66db000b3d0b727254fbadb6af3a3c7b646_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-registry-rhel8@sha256:ea215cbf22a37c2f2b77c9901dc5c7493f1f3a694276f42d11fcefbf045a8b38_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-rhel8-operator@sha256:4d983585501df88bd5f602010cb72ea460982b25fa91c05a83f0b711a457661a_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-aws-rhel8@sha256:1792552893fe7f146f04033f342e9095f0068dd60e1f3a1e2dad9c5111dd28e6_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-csi-rhel8@sha256:aed05c3b1e7eee9054ee45b499e2eb31a534979468ba22be46f83459d0dab4ae_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:82ebe14f59b19d628ecbe63a212ecaf4623a98a432b8b4525b118c6b24c87d90_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:1200ba024b3301c4ea18817c81e06133a52bcc7565302ebf9aa4677080b64e56_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-rhel8@sha256:d9a46e3da52db4880cde8faa6f5e406039e6f38585dd14dc97db4b5846b4f7e5_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-restic-restore-helper-rhel8@sha256:9fda0732f74519e71a4f10f10b32a451f01c3bf9eae37f7bd1ff90ad8baf3a9f_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-rhel8@sha256:a5973be01956a09f75bcd65481d484c12fd7bcefad5b852fd0567f6d8b51f0be_amd64 as a component of 8Base-OADP-1.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (7)