RHSA-2023:4091MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.5 security update

Published
July 20, 2023
Last Modified
August 23, 2026

🔗 CVE IDs covered (2)

CVE-2022-41723 →CVE-2022-41717 →

📋 Description

CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:3dfe8fac92a85105c681f97d178d1482b65194e8e574e6382580ae83abaf9dfd_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:465e88a64f338cb194a2cd4515aaa6c9e44c29de23b0108768561d5b86aca1f6_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:ee6d69662b4ba872db6f1bd76e01194875ef73591fad7c979b4ef6b13a7aa001_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:f00cce3dddb294098c3d634167db9f703f7b3d27a78aa882bea464391f25f47f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:34586bda6e4661b46c44559dd15e2f2bd9e31a80b134cd6fdcf659c2ae21a74b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:d84439c1d8d3c5b0199af5b229caf45db40eb51feaddc45e78970d2b49d1e056_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:e6eb04b510057198a7d83b2ba9867ab3547c473cf76fdf917408418826d6cb24_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:f00dda75f07a5e71131ad313dab9fff6de93e49b903386efb9ead453c731bf99_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:0a39861ea069f532cff8776fa778d5fb6321b130a060e414b45945e39d314896_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:63dea6a6b1d01193fc2bdd62484fa0119284a3040b929bf78dd69edb2dfe74f7_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:8a2671229d05be3afcd10603621462718856f477724eae0db205ea26328ef6bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:d009bab7e8bf5dbdb61ffd938a0905acc23f7414991444df9591da059fd1276e_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:29a2918d4fe7e242385d5275fad0c6038307b470d797cdded2115da12c889dc3_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:7cfe864030fa6994500c5e76b4a04e243187243dc83f920632967026d514a1c8_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:834b5b22fd8770935cfd1b40c106a174edb26e99de9e1d360eccf06b0eb544fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:dea58f77bca449d2613625e913ef3b4fce7de9182f0aec4cb68aaf4efe6802b1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:67e97d37ef5cf3fd57c71efd4778beda43bf3c55858f6e3889f3026c5e718a0b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:6b025c194ad66dd24df8b0eaff833d463e3e5ab26d84456a21220da08e0ae898_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:802c5e7e1be7ad58da350a71feb76c558d6d4c50f6e2fd4ed577b6d8c1b97713_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:a3a3ca6276eb2abc4468b3f07b9c82e2406c723af92262123f672f3db4f3e91c_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/oc-mirror-plugin-rhel8@sha256:271ca4ff56ccc820e269f16b4b40be5fa0a928999cc0c3282252978d2ea00fec_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:26c171d942ae52a6760bd7d5c93ab45d512cba54d9ebac5c4f6360fb58b3f684_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:801b5f076455a2bba7f82366182117dddd292fa34ff6237ef2d47061ade19aea_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:935df0582049b90a18a2bb9d93f55c2d494dbdab072eaff7baac814ef5199764_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:e036b7b517eacd7144a20ee77f02b208eda4d3d7ede792e55575730419a994dd_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:9c92b78bc620388e4dfdb210766f92eb1f4c65c614c2495c40f370be8d2084b5_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:a97f7d5ea185f5f06c5d9604b52bb4cc211bfb9455d90e32da98415d3d623e8f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:e4373256b9316f6a11e72e8f9e9776dba63e5ee8e0ac4d0a01d6cb7aac672baa_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:f6ed40265513c68d459b542c7886ba01d88e672626756d1a601a04d57e715955_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags The sha values for the release are: (For x86_64 architecture) The image digest is sha256:af19e94813478382e36ae1fa2ae7bbbff1f903dded6180f4eb0624afe6fc6cd4 (For s390x architecture) The image digest is sha256:d4d2c747fade057e55f64e02a34bb752bd2cd1484b02f029d0842d346f872870 (For ppc64le architecture) The image digest is sha256:48466f0b7c86292379c5d987ec37f0d4a4cc26a69357374e127a7293b230c943 (For aarch64 architecture) The image digest is sha256:e9afcbe007e2440d2b862dc7709138df73dd851421d69c7f39f195301e0cda53 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

🔗 References (92)