RHSA-2023:1329MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.0 bug fix and security update

Published
May 18, 2023
Last Modified
September 15, 2026

🔗 CVE IDs covered (2)

CVE-2022-41717 →CVE-2022-41724 →

📋 Description

CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics

🎯 Affected products9

  • Red Hat OpenShift Container Platform 4.13
  • microshift-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.src as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-greenboot-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.noarch as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-networking-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-networking-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-release-info-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.noarch as a component of Red Hat OpenShift Container Platform 4.13
  • microshift-selinux-0:4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9.noarch as a component of Red Hat OpenShift Container Platform 4.13

✅ Remediation

For MicroShift 4.13, read the following documentation, which will be updated shortly for this release, for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_build_of_microshift/4.13/html/release_notes/index

🔗 References (41)