RHSA-2023:3305MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.1 security and extras update

Published
May 30, 2023
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2022-41723 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products59

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/frr-rhel8@sha256:27b61ff010a28c93a02e296c7bf702d4c9aa389e41663a91ac3e213c62ddb629_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/frr-rhel8@sha256:80cdffccb419b65d5532b9ffdeea12d6cb6672e7ae44be5243f27c771f5eed08_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/frr-rhel8@sha256:8c1cb70c4570a3fca632e9b2845eb9f5cd566234230dc85384f7f911321c5850_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/frr-rhel8@sha256:fcf44a95569c639994af83f6e41ff095dff7d0146323b72306c9b20f81975b07_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:355336bc41b827b2021e989961da25aa7da8ae4dd6d474ab6f5d89a40c982135_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:79260e1b649a2ea8cd0376a89e2e1206fe6ebe4b5ea4b5151f07ced06ae22153_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:e306d6295ecf2a892714c856af825eada4bc377dbe9bb763d3f945e6b36c9bac_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:ff65d291d162474790220c66e4a8b81741937ef8d59ac830d5cbd1ef35ed74be_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:54705785f43f8f9718d41acec5ed879ffcdc9335b1971a0e376dd7a2c8113af3_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:b83a8fa0b2c712d6ee7a96590965fbb4f951e2602a4fddc095bb33156c9449a3_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:cf11fb2446d8c8522397773d9a5c7901d6a162cc52507b5dc5345fb5c7c9cac6_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:dca3ef36a6fe852f80d71940bb09fbe941c5c10e45c01b108c1c8b9eab3a5946_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:45cc2a7fbc5490761c39da214856a1a760257497d89befdd8dd44f7333e3620e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:8f7476bc09b15b6ab891b50bba6df1c264dc1b19b4900c3cee5fe9647259fa34_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:9682defec0ef3ebaf4bee80ec0bc9c7ed8af81b7863e50dfd7a74359a1916434_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:a6f4ce2b8e07851083368fb2f1750a8ebe0bbc72b7adbbc1d79f8cf8462fa283_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-operator@sha256:25ac733fbdb3419f121b2e5a30a99cb012e03fb3f7df64bbdcb32ac8a97dcad3_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-operator@sha256:aab3aab5ad246959da87d2f594c04388320431d0eb4d458309b0d7531f3a534e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-operator@sha256:b0d886706f648318cbf5a13cd0ffa0dde52c2966e42d7d99c5e8b7d344480a9a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-operator@sha256:e28acf63f4a08bbe0e851049f28c8db3c120b710afd4e86809bb186450688722_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:25ac733fbdb3419f121b2e5a30a99cb012e03fb3f7df64bbdcb32ac8a97dcad3_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:aab3aab5ad246959da87d2f594c04388320431d0eb4d458309b0d7531f3a534e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:b0d886706f648318cbf5a13cd0ffa0dde52c2966e42d7d99c5e8b7d344480a9a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-kube-descheduler-rhel8-operator@sha256:e28acf63f4a08bbe0e851049f28c8db3c120b710afd4e86809bb186450688722_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-egress-dns-proxy@sha256:5508cdcbf4cc03f60e74832df6f23de67242e6446cd26459100117b4bf6b03b4_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-egress-dns-proxy@sha256:59f6247d806c32b383688eef9fb79e1bf32c6d89ee6b0503b34429b46b1bf246_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-egress-dns-proxy@sha256:7d587bdc58526a29b3beaffc682ffca18d1a52eebcd0e5497bd728f10e7e1f87_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-egress-dns-proxy@sha256:8334aaf295d4fa31f7877128831ddbdbde41eb5640639c4440c0d3cf9087dd3e_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:02c1e57fc0ce6293245b80351b9513d6ebedfa4dfbe1860209e2373afed62f4d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +29 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html

🔗 References (6)