RHSA-2023:4603MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.9 bug fix and security update

Published
August 16, 2023
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2022-41723 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products92

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:1429a811ccf69ea7c900fc51f5ec4f3d27d08dd60926c62f927291408aae291d_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:61a8f7cc585dc22a1b1c013e99333f66b87ace9c4984b1f2a12999168facfd62_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:6651c069d3ba03f5320eb43695e8b5185050b3eb2f88a345171ecb3013b84d78_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:bbb170e48cc0b86b39bbca81d6a1a44c42b7e28d1475550f5e316d514b99038a_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:173fe43615ba44efbadc5bcf9aeee93b9a944e0e169f2647b5798fa8e78022fb_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:277605f2e8adc494ce7615197ad9e5f1989cff6f0ace3042e7d2e3476c929757_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:d6dfd8ad02e91e56a29563c5c2f1679179bf7043f3ea5aed47554ca1acd6b386_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:f4abd5dc64a98c1a1e5dc52c240400e4a300c0ec0966acc79af3e562c687af4b_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:71115d4b27dab927bf42629fae92a98625270ce63be1308c515957ee5c992a1d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:7864c670efe09839ef6f9932744a8346784d455442df83f1b55ecc7cb8701e3d_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:acf25e906e935e80c4230ee0f504551359785ee337e15b7de57d92a33bbba5af_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-installer-rhel8@sha256:29f0372f39cae6dcce07d8b6abd9020c17f902ec600669b84bafb91e2e534c04_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-installer-rhel8@sha256:437ac8d44f37374fc819131db3aa8609502759b6318832c782413ebe14ca695a_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-installer-rhel8@sha256:7adacdc2653d283097699e7e9d132fcc0cb89c8443b7898162b22c3e692ec30a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-installer-rhel8@sha256:a71b71adb6580413143d4f29783ff42b164106a2134b318ea03eaaf7ac96074e_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-rhel8-operator@sha256:1b7abc69eb81ace7fabff04391e63d596fa35bb69e3f1f1ef1465d1a98f835d6_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-rhel8-operator@sha256:25be0baa5dce550b54a78e3db85e0672e2e08fb042d402c88fa4f5e288ae9249_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-rhel8-operator@sha256:48f8310cc23c1581704e0f2b54f1ed04619c999576faa9b18c787d1a6a8b3a6c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-rhel8-operator@sha256:c6ba0ef96f6d46f840abd7dfa07bfe482a512ee445ff834b0025c817b7135b39_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:3f2b866a534bfe84ae9fd60d7deb4ed607f0dd956584ec5d2c7b73aa521c802c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:8728d3ea2352284a30fcc630741305ad4ce8f6511889eb54f4701d289f6d236a_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:98f5fe4759444dd048122e81738e9e73c2fb9322423997d5467448868b3a8cd2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:e6e10a5f7ae680f1b64beb11b03e860de416df665169e9b7999bfbb39d5626ba_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-config-operator@sha256:1b1e481c96405a5716d87fc0a149513bfe8c0fba9501b0ce50ac88c2fe15fa39_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-config-operator@sha256:2e9539ea3f435d8c073a13eddfcf7484e9805af1e8c090dc6e78686245d54f55_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-config-operator@sha256:8e75e1137ca5e1cee5d8204917159e6a11f2cf22eb9f138f7665fa9ca1732471_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-config-operator@sha256:eca8ff8183d8a51881d0341feea30db34e76b9c22099b8fe6b1942678c3d5f25_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-ingress-operator@sha256:33876c0c61dd16fd600c1483be8e1adf5673a3050accaab1a010c574116e7b23_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-ingress-operator@sha256:426b6bb1c59c8031a0e9913ea403608f950a4ed512f0dad30bde9523f2bac21f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +62 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:a266d3d65c433b460cdef7ab5d6531580f5391adbe85d9c475208a56452e4c0b (For s390x architecture) The image digest is sha256:d5da317bc073649a1613d67a4adcb6db707a2bf3f0c2f956c2ee63c4a9a7ca10 (For ppc64le architecture) The image digest is sha256:8e86bcbef3ed1763bbaad0443a614f646802f763ece5b9c09a2dd1ec948796c5 (For aarch64 architecture) The image digest is sha256:014768bf2a781ab2f40afc237bd18f4a87d19ce6654b098e7a41798e3daed464 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

🔗 References (16)