RHSA-2024:0198HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.47 security update

Published
January 17, 2024
Last Modified
August 24, 2026

🔗 CVE IDs covered (2)

CVE-2022-41723 →CVE-2023-39325 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:57babbeef0acd15cb98c66ac61a9c3aba100f33a9276d462c79ee27668985e00_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:57dc6f742488d387389a835cd59616c1b8342e7cc6f8a93dd2e2633246275635_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:5c6a3bd292ab40869091c0d934903efd9e952cc45a00ea8392e7f2af2c79e5cf_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:83d55c6de892438003b1a164e0611d4726ed4df023e38ba408e39bda3b992b5c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:3211f20f837855fc64f87a24b78bc72d53777f61bf5e9b9d7437d9b146933481_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:5e4c83a34f34bbb8d07891afa5090539aed9c0a6511c3be5655e18f1a32f90ab_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:a131ccd69354feb5a4a2f4537159a2e0b54a038f9c60c36467f503964b68912f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:cb34d1929476f570ccae960df1b230ba3e3c7f0a1638e3fc20cb079cc492b560_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:2066a166592a6258759a468ad3f8884578e4573907d97c47ecec3268c35eae84_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:458dba4247ee5309441d477ce3e6e27ea64b4c991982c225930442a42b5f2f2a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:96030746ce191bb71953ebc23ee511679a78eeed81ae8f1099a1fb831fe495cb_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:b013d8011897b0ef6266e98c2a99d9f87bc8803297d41876c6ed705957fe0e27_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:5374b13763e9d0ce6474b919b0335f7828ca7d90bdd73e1211bf552ad232ba47_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:731ea90ccca190a402ee4616e7d81f792c2e0c9a130bc20f71993b77c2d549b4_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:7cfb1cc6259db2839d5c53bde29965c34b1b49b04e05f1fab736992d18787ab9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:ee8d24153b994e2c66e0119b363fc2e9935d55f49b3e0ba4aa2a5445b2be8b86_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:559788627eaa74aac894769d05ae9377db29f2ea06cb73b9984060aad49f2b14_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:7ca7a11a9dbf7abf64db9112f0e33c74044dbfe90c07c54d674e80c80e71981c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:891d1eb7c088d3e16bfd09e09889120bf0ae4286aafe72b75c89c3430aaa4e99_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:cb89552e311e8a6810368cdb8e86eb451ed882f017baa544daca9ece22b58fec_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:5905a9861f1ebc6bcfe5066653732c884affdc4b2f20908ca09e7065ebf5810b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:90a58a1453ec83c8539979c564cf6085bde409fe7a4223cee9bbb9f6929c03cc_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:9a004cd26203a790914f1c170441267b88e5d1f617cd2a078cfd1900b2726531_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:e6b55b38720c198f236264bb3b7850be303b0b0994a70213cbd70cd44634b2b4_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:e7e9a9356e26416b02986e54b8588be502606bf67c2fe1596f81ecd70c695e39_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:64241992e595b3d7e3da33bcd3eaa8a8bed45fea4c48eb5f8efa05c7bc2db840_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:877678ef09a1d1bb7f61ea2c1652ec41c24741ba84e98589061b335035688d2c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:b2ebbee70dabe904686bd5edb6182df0d2372a992efe52604a52e6992aca5696_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:e41c810927ed41e7c35b165c3c46fbc6b29b169cb5c45327a802256454c9b8ad_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: The default stream concurrency limit in golang is 250 streams (requests) per HTTP/2 connection. This value may be adjusted in the golang.org/x/net/http2 package using the Server.MaxConcurrentStreams setting and the ConfigureServer function which are available in golang.org/x/net/http2.

🔗 References (19)