RHSA-2023:3614MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.4 bug fix and security update

Published
June 23, 2023
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2022-41723 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:2b9f5b975508f09b9c68fb55da770180b5f6cbe3feeb7f890b37b4ed99b8a659_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:8dfec955aeec970fb37bdb160b3016395daa3a5d6cb8f204e3b70e8541b2e6ed_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:abd81435e1b37b1106957b76b9962474f369193c0e4d51bf48329a05453bc7a1_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:ef17eb179f32e29aba21d81ae8548e77d8d9d490492778eb32296476d436d8ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:6074f11ee118f5f37a3adb19ff45eb63e2169d07c79725210bcd6ebf58555a25_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:6be056356c2e1eb3e4d662b10bcdf206db46e916724372f79e25209da379c841_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:b47aa38d13b9b9dce56466fef32a847d3eb606ef0e958dbcdbe1430b3b0aa5ff_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:e85c423306e329456a513a091362aa849047fc72c031c824145d7d01086185b0_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:009831bb2dff60111af54f2f4b27145d32f9c85541cba14cdc74fa783a573ed8_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:86735a06c4dd3e414254a2d6161a79fc92b90139a0bce99876a944afb059e11a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:a295fffdb58c312912a161407fa5f7546e39039d653da66a0923751bcc211210_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:bad5d2537bff969e28188f80637dee4936421262c8174d6def71c4858427a9a0_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:66e01a67733aa33e4f4ecd642a22a87059a5818c4d513a2c1674bb1777d21b3d_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:7ab57ead78a0b0c89e9f0594261b54bcb031473ac15ad84f7c124c28f4ed3d5f_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:a7eafdedd4c734b6156c26d19a7aa1422e6b0a17f4d6758be3d47576072adf08_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:eee1fe23a48d558d642f692efb051693971227caca94ae966ec0a525f05ab19c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:5e08a789d1dfd99ed2115c8507b05fd95793f407c51628e0e5b1beab935c85fd_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:9e09b109126553ee27e74878691d9f5cad88802381a9bb9318204a46807af76b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:d6a0e8a1f79827a41675ece8abe1f6e66def5cc4879e77b96eef8fabca6ec465_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:d909ab70e4e130aed913c991d2809201f156ce15fdbb056559ec784554ed5dd6_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/oc-mirror-plugin-rhel8@sha256:4a720dd8fa45c281a27c1a1d7b39151c2161abe14dbaa3dca66c49e786dc5537_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:61de2ae67a9916c87a986ee47d97b0ab4b8befcd07ea7ed9f0273f78f2fceb1a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:a1ebe7a712e635ecfd26999f6cbe29dffa6b98b4650f61802b3c42e8c23c042a_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:db4991a0fcf1f5ebf7d1862b649b67e5599a67ae8a028d9e4f1fd968df8a8899_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:e393059dd67b45d821b3f9f8eef668ed84d21246e2741976b7df0fc48796ba7f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:19e2524fb97d6326f39153678de0641f9dfbd0abd8a4e8191056778e3f5c5168_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:2877c5f9e4e0bb3af377621f23f4d85434dbd4bc7d9b2fa7a5e857cc71d02903_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:301b5328cdaa90e247c74adb9c2823c59e9a545be682e0ac3c29809716da2057_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:a958238fe953abef001f61b322f78bb44df61e97d3cc58ad00c673c6a70d9e05_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:e3fb8ace9881ae5428ae7f0ac93a51e3daa71fa215b5299cd3209e134cadfc9c (For s390x architecture) The image digest is sha256:52f4c09586047c61465a24ceed2f5724024f5a5ef25da46e6078330f0dac08b2 (For ppc64le architecture) The image digest is sha256:24763eafbee5a36c699bff8f4103bcfcd8fec9ef0c7fe30c0ab5c208bdab7044 (For aarch64 architecture) The image digest is sha256:13b14f0514d24d241d40ebacac9f15f93acebc4a7849e4740df49e65e48af424 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

🔗 References (29)