RHSA-2023:4113MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.3.5 security update

Published
July 17, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2022-41723 →CVE-2023-3089 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding CVE-2023-3089 — openshift: OCP & FIPS mode

🎯 Affected products25

  • RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:14bfa79954caee54a6d23683da3614cc251b1ec4e08303e3ec4217ee322c043f_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:1abfbe1c3898a4085fae3c76a8a6831342b74680edc711c0688d48ab86ffa5a9_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:cd047c9fcde218dd4bc7a673f7e027039e43ef67d8277517905afd25513cd51a_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:411d0566a7c16469ded33d4f8b3b893d7f0ecc1363b033f711eaddacecca33d8_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:8c14b7863467e814c833fa278d6b0be058b706b6ddd2b8bf84d6054cd354dc7a_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:afbd6f41156f3f0143b2a65972b15400d0cced3b8e19af16558b85b4c452f328_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:408c3da264aa721610fc9672946dbb22ce494847cec8d31b4100cf86c5b55a64_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:68362d4be19bbae7d5d31ebb1328f4910957ea8b85120ee3e43c66c053a80810_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:a061c7046ac2b62c60e953d21e35781ac26423edc079060f98d0589b47ca681d_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:424009a29b4ea3c09572d1cd89ea1a72f168db6619165f20df15702b673f0a5a_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:7333a3c2814ce860254f19a79d0ddea884703d4152ec6bc75a2637d11ab9c8f2_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:8ef04bcf54f84e349c6f0395301d031d7c8f8a5f058103043db813ab9a06f96d_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:a9b60e12998dbe1efa9e475f9cca96ee58436407ddc5888d83c3206d031b3c47_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:fcab427703c41e5e821825e839099856aa7c4c001007d8d12e0ac8692e5644da_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:fd90eda22dfaa7630540794a9ba30a38e81fc78269157ca92e002e8d384f8482_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:33abe74b18c6bea46a196143ad0b3d3885b010e3cb764b9ebcc95ee24ee61963_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:6226c81f65bbd972517be75a5e58b12f0279d76913f937a29613d71db8f0a0f4_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:ffd9f7dd13481cb6f9d67d83e845bae408e112d98be15fc8553a729ee48a3dfd_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:0bd7384d18ac426b3cfc1916c86a58c492e43a82c5ae7469f5508a74b7ee0b92_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:300d87447c106d9762bfb3ef41adc0d419514b79eb8ee67014e9e894f2177b9a_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:8a015e6ebe3b2cf86da429f154787ae9d92d1ef567b33ab47c6f33cb0633c4c4_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:2e71b4d7783b783c2c0a292d78dff3048ecbd4c74c93a2f66c519b021a4c0b68_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:894c1fb3feaa27fb86ed80f648f09d6fe2ee4495977be0c776fead5b2bdee621_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:f47ff32671d8eadeedc569040b19ad04fb5e65c94523cff4625154d46839c156_s390x as a component of RHOSSM 2.3 for RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

🔗 References (7)