RHSA-2023:1639MediumCVSS 7.5

Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.1.3 security and bug fix update

Published
April 5, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2022-41724 →CVE-2022-41725 →

📋 Description

CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics CVE-2022-41725 — golang: net/http, mime/multipart: denial of service from excessive resource consumption

🎯 Affected products37

  • 8Base-OADP-1.1
  • oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:4a72bb88b2672bc6f6ecbf467bc4812b4790f41e5e155ad86d6007866ba56739_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:c1c6ca1ceaaea0961d13a344102667dfef4fda80fa3899b18f81a2ccd7e2c667_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:c565204115ed6aa8c697dd20f162b08803d3f4e8b2e7ced932d798c72456763b_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-mustgather-rhel8@sha256:266d40564fb07be5c58d646be66653957ecca9e9067db524c53f3be4c675450a_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-mustgather-rhel8@sha256:ca6f26e0b45d037b15b48c4c514d1b62a178f8da3c08db6a3cfa81654446978d_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-mustgather-rhel8@sha256:f81725501d9ba62ecd42b6cd6ff7ddd6cd9125a335b63e9dc2fbab954a7b3124_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-operator-bundle@sha256:0179239771ae0abbd470d324de3ae55215deaebbb65013ae54eef4ba75a4e139_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-operator-bundle@sha256:36d7f15c38f69359a3a6789a77b9e68a0111dc0b06562ccdef285c13fa258ea2_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-operator-bundle@sha256:d2ee44447d73560d3c6ee146a6fab6da99c36331d06879498e55435cffe0185e_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-rhel8-operator@sha256:6088bd93fc4284c495c0960914789435a122bc61aefd4ddd6fa46e801b1384e5_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-rhel8-operator@sha256:6928bc402353eef2739d3abcd8461392912e86a9612bff5f6ebe73bede6dd377_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-rhel8-operator@sha256:6f44c913882cb5f195069667c1cabdca6fe44f97127d52d5cf476120038413e1_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-aws-rhel8@sha256:2986c4127eeee08273ce781a885c4d778a68bd4fc5475431435273040cbcd7ae_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-aws-rhel8@sha256:6beae438ffc913ba72e4817b1f96aab4c87ed0da64b429e170d8d50a57e9ef67_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-aws-rhel8@sha256:e0fcb8481086cacca4a6300765799ab2687ef97ec6ad14f5fb071e75f9d1b253_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-csi-rhel8@sha256:6d49de157c09d9e28a8964dcffc73bab0abcd8d1711e20511a3ff93f04c23b1c_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-csi-rhel8@sha256:78f2bcb592f36ca78a2738f87a5345a0f1ea15d4f1d5f2d9909771dce3b7b33e_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-csi-rhel8@sha256:dadf8b6b69563b24eb4cfba551cebd3c5e5e1cf15e3a8ad775ab9253697b6348_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:7e2334b5eae4919312988d7276d32ed97e478c3d3b326544eae699b666bc0ce0_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:a76e12aec427067d7819498c4cbb16f79732545da5eb1291227af57b362bb5cd_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:ac40bdcce478bf051f3e95af1e2f1960032d51eed3e141a1a3c2bb1afeafe8bf_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:6284bee4f6ec149c506e2adcf10249eedda2a50df8fd46b9cf9d18848a7bbb9b_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:a6eb5ab951908cd6d441b72ca428ba875d621d2ecc9c010d604ccbf275b894d5_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:c780279f96662bcfdd601d4d2965387782a7349d19bef32dac5ef368d1bf095a_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-rhel8@sha256:55aa7b0f8b856f9da4d8d04439302359ecbd6f32c64e7c2f81f718aca2ad5b4d_amd64 as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-rhel8@sha256:a899623687a5add0869f3c8ff28613178949c016ce87d142303c5d3d81951440_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-plugin-rhel8@sha256:e62465b57a180318763f023074758ba8a4c5f8af092e6ec2c3042fd4d2e88f36_s390x as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-restic-restore-helper-rhel8@sha256:4a924db5cab657fdbdf1bb20a56df77ebb1281cbf470b5093d3710fa9f354a2e_ppc64le as a component of 8Base-OADP-1.1
  • oadp/oadp-velero-restic-restore-helper-rhel8@sha256:a08b9b178f6bfebcfdecfb4da5b0005a24575813ba87add74d8da34b0de29115_amd64 as a component of 8Base-OADP-1.1
  • +7 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (5)