RHSA-2023:1030MediumCVSS 5.3

Red Hat Security Advisory: OpenShift Container Platform 4.11.30 security update

Published
March 7, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (1)

CVE-2022-41717 →

📋 Description

CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

🎯 Affected products63

  • Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:397bdb1550d3d620376760449a14147266e87a5486a85e1381b10052daa0b392_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:82ab392c7578d69c4e3d0d9822e9e8f09268e4f1a4803036dc920723429970b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:92a2321c500156cd3fc7b5bf410bd1220684a3aaad2e34ea910061c442e168df_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/driver-toolkit-rhel8@sha256:b4fbe80c845a7c193db8ccbf9c4d37b793ceaac92e02468249ccd7591cd42c1c_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:939c0901911f3abd371d68aa0f5ce66a197fc8f77a9f5ee311a198cae4668183_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:9c8ee198f2f8ea9fb39c0cd52979565dcd92b0216cafdbc6d27650a13f669e77_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:d4b88c6ea0fb265b2671c8147ba8310910027b5293e63d5ace4526b60cce19ea_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/network-tools-rhel8@sha256:fcb03bcd25b9b7021342b328afcf3e2d13348ab7ab9076e551eacca9e8816c49_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-baremetal-installer-rhel8@sha256:1b79570e6aa014de95db624256cff0d59cc37e0f39ac1da2db4a0030b16b1956_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-baremetal-installer-rhel8@sha256:57b11dc5480274fb95581026020f68c4e9194bf23b4f6920acf86b6cb1b5e2d4_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-baremetal-installer-rhel8@sha256:9214544b1dc658aeb7cf08b46aff9360ec2d1b81de7bc62a3b98c10b90b9386e_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-baremetal-installer-rhel8@sha256:d40cf9d3c31d89fd03725440a0cfac82eb4d68ef7fb6eb17f4c46c947588028f_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:258bd32a210378e63ef771d66ae49423e1788d315eb2b0f2b1cf7d3b8d51b338_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:315b607b99f55bbf5f5ea96982fa971fa7e7c200440b5c10baa6c79911c54139_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:78b07d1da142bd21f4755bfd188963c0310933a3ac12de3e03027d7f473a914d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-apiserver-operator@sha256:e2225657d998872ba7ec0870520e9c294e3b7a108b7c41546abeaea3edafdfe7_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:640576e95ce4d5a6ef60d72246ef41e2f63e2f8010b6c170f5959461d99e232d_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:8410edaee7ad1d694d6eb444fb5afef6aab9264185b0df6b958869f86b21a521_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:d3869ca3f7e129f36e27cfeff9718c08c62b79cde95c1b4066965a5d2048c8d9_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-controller-manager-operator@sha256:e2807854795015cc544c1530c3f0d595e28d1d2fd164f638095ea27e35395b5d_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:4265c2a39d96625870cb96d55fdb658b2ef614973b8a17d1789d4a896b932a69_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:467950d5f74bde1583335f31bc9ce968b63559c749a12c580a6d33f594006691_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:4aa821d5b5bb020c8c0c91e94ed62c193d68cbeb7fc1e7f04278935ba7af0eeb_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-kube-scheduler-operator@sha256:df94d41284dbc4a1ba8beb9d2a85cec13e76919c77d5d035354ae168dd559662_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-network-operator@sha256:126ef8b405e1948d7f48ce2f9d3969ca392313baa4a90444c327d221c9a11812_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-network-operator@sha256:94c162577fa2fe2be23b275c50bf9a2b9d11840edea185006906423a3dc01cb4_amd64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-network-operator@sha256:b5beadbe32fa7ec270d445fcff892998b11665dff99aae7de40c925a9e3f5db2_ppc64le as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-network-operator@sha256:fe55239a80eea076d1db27d7bc28a2e027958c18cbcd7414b7d8519a7b90b5b6_arm64 as a component of Red Hat OpenShift Container Platform 4.11
  • openshift4/ose-cluster-node-tuning-operator@sha256:67d0ce68a4d2ff1fbedfe14f6fad7835dcc6ab99bb47d9a91148c9bc2b3b1e67_s390x as a component of Red Hat OpenShift Container Platform 4.11
  • +33 more not shown

✅ Remediation

For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:8230ca19fea80ef02f255a9f92688aa2639f68739a2b69114bf9af06080f9edc (For s390x architecture) The image digest is sha256: 7fe1ffe6514c1eceeaacb49ea2319a1489b0a3d9a30cdd6fc39ab7cf3c94ce1c (For ppc64le architecture) The image digest is sha256:aae8c6ea3512a3bd625c1c7add0ff98d08d1ad1df30b6ecf367fb80bf3169051 (For aarch64 architecture) The image digest is sha256:182556f517d6a488cab03468cc1f7d977f46628ec9106465fea36ce2ae358b4d All OpenShift Container Platform 4.11 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.11/updating/updating-cluster-cli.html

🔗 References (12)