RHSA-2023:4225MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.6 security and extras update

Published
July 27, 2023
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2022-41723 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products146

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/dpu-network-rhel8-operator@sha256:de78228115cc69acd6d6742f6be1f60f183381bd7a8901acc194b5c282e1acaf_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/dpu-network-rhel8-operator@sha256:e52dfc2d6dc526ca3787bd01be2fd1e813849d0e387fa36bc5bc7db812e2b9f5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:15cb4c47f3c9e4d5d613b74596add18d00fc4f6aea6944cf27577bbdca2ede08_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:6926e9695b1a524610013f97edd8d57d7b9c707d368ac2dba72a19d2052119c9_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:e3545f0c25cf4f7f2f2e5420a897a9fcac7f99f54785a2ecaf9176ed727b350e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall-rhel8-operator@sha256:fb67b22f89210ae10e0da7955d7bdf904c3f77027c23761fbf43d29bbfd5dfdc_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall@sha256:0a7e1f1949107a2e2c116bd9b7f30d6f4aa82cc9b613f1af4ad0e32913e230ce_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall@sha256:94891806e806d5a9f3533ec7442d5cd9676905ea39e52436c86e1e26a15eb25b_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall@sha256:ca611e4f6855a4de46c9309548e5ee434c89c5d02b0a012d43c62e9860fea4ea_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ingress-node-firewall@sha256:f496a91ca7337e3f80c0c0c50aef82f7a90122b7fd9cce18213cc5aa0bf15d12_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:1d037e5d9ccfd6f76a194d46985c9590be90903601fe1ab4ac5e688c07e32265_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:cc0f494a61b020cf97bbb5aebf6b30f7c0e22666eeec67f0515aa9a40900b4e0_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:e31596a4aa8486f178283456dc4ea69a3396784feaacd56c76f8d588dcf6e5b2_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubernetes-nmstate-rhel8-operator@sha256:fea2d362d6236a735ea5147ab730f5de92049fc8f9d90fc29ac9c1c52ffdb1a4_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:0b63427d4698d1f216690f5eeaaeb38565473594ececdc8191a41758ef81b908_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:2146213732a1ab421285b56e1163758da80f4c5e5a14858be946bf1aa411cc3b_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:647123119c91b5a240abc9b12793d8cfcf9024b6d35064ffcf2b8bee79276c9c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/metallb-rhel8-operator@sha256:80fe92087b91a9f64467f44ef8cc572a5abb40b04b1d0d3d648e48dffd9fcc47_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:0d8001867d662ad3380a11ebb5b0909b19cbf8f29ff8fce4aeaf3a5b403cb14d_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:289bc382e8cd7a297b656500e82a3274176df27bf30283e3848edbcfdfa91f13_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:419cf99bd64730a57c92d821f4bf5389cb4baf664ac2f0781cc10698398ad3da_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-ansible-operator@sha256:f375d655b7d958a99f7f3e16eaa1370972aa1bfbc50f5224bb99ce4bd6ed7a27_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:b3a0f86ac7f81ab8d2db6fdf28ca24b7dd6d99b3962d4b9bd09890c66090fb20_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:f04722a34611eccf635d676fc78c153c2df0d67c18983d4e57dc9b8e9500b1d9_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:7356adfe3e2b40a0e4776a69312f7475e4cde8e1bd0f180e61ff2ef07381d53b_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:af528e4ed0e1af1801259b5bd970c141e38389e7e956c5d0d30c67f3e54b7e73_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-event-proxy@sha256:10f1bf710014f05bc8ed1a6c69892a5b6298cc050f49a39c02dc1716e0f587b2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-event-proxy@sha256:3c638313a64825ab9cca427ea5c285931fa319f2ce2a57c8efa0f33a7d3f3b6c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-event-proxy@sha256:c8f1a78231c6a4fe214bbd55f0c0a0a0f65d983565ea62ae093e9ff44dfc5943_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • +116 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html

🔗 References (5)