RHSA-2024:2664HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.12 security update

Published
May 9, 2024
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-45288 →

📋 Description

CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

🎯 Affected products107

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:905c14e79e33ad2e84610ed7393706198c0cd3c4456f449df1196bc1da7dd3e2_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:a3f9106aea9f26fe8f8760524e5b9fe052d9ac5de19a3ed6daa84019eb5127df_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:a4275a5c01217be2564b5798c661538676dfda06185a08b9eab1a4c9c9fc9efe_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:b906fc563a63371787f3f24ba1e3035da0d3360d3e1863f1d03d40400bb30507_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:c32a883a6ca7b2e7a58b9dd99a5e8d056bdbbc9d79d8486b2e4c7e07c3dc4512_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:d8b070b3acde3f90757ddad834df8e94b794669bfd8cb70b109ed5bb0791448a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:db3187d092cbacc848e88ba07526bcc1faf55b0d0571c18894a5f3bc45edce51_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:fba2dbc0721f364ce287fd61bdf711c2627da16b216b9aaa72503ba618641a88_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:1944dd006796d1db3126a4d9e5754ab97941d014efb7416dff1607fe79e63794_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:1c1a1f897c4b1e5f20bdeda70666bf57321d66fbd4753ad3478450ebf5a1de53_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:42fe786aad32ab69b8f738e7ac8c86ed142fa77c0e75531921f21b69b56deb47_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:7464e92bf1d5271ee08f7eb40b85861e97b82721f8c3c21201735df0d9817aa1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:0f1c9c304df025b1b83870a863a1e1e0e70e19c83bca1d9c027e2a3598405a06_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:4b51359f0d423c3711cff713a432ec9b24f229998d472f8ad7e2280ac40f8d7e_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:84373b27158b2f06224d8edbd1cfe5d3279e7347763134666850c4a739e86216_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:b244064ab9bea3c323680f74936bf593e6f842480f20111bb29c8f1f06902fd1_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:4effd625a5a9217520e9babec036a3957e105eae14a2be40d5bd072c6ffb3d3d_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:87324ab8b7f44d9bda37e2b4bab03b69160468c32866d11441115aaeede4c9ab_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:089513d842c2c690b3a7a689b59a82369cf04be48c2959dfb4b68402b316026f_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:95ac692a6d1fd32e54d42d03d0a01aa7a8332e78439dc3f74b7c4f2c600bfbc6_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:670251e8524c85b3206249ce6016ad50f0497ee1067fb1cc629f59fd30bf26e5_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:a3f446bb55e5860a60ff8a7d52101e8f2d4dadf2960a2b795272dc174a780bf1_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:c0a9e153a48698308bf6512739f44710fd2490ca2dec69ac33a6cf917a51e2bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:e4c0e45242db46e01e187f374d84023cd97a723f33f432e748e31aad8db45d58_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cli-artifacts@sha256:3e74037b47b556ce0ffa5120da9ca6532330d004f1f1f5825003409a335293a3_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cli-artifacts@sha256:51049a21b6fb72da53665719d96024de53122bf7af33affb28168a315bdc298d_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cli-artifacts@sha256:ba678a1a5cc24156b70876b83387fcdcc93f33b095ba358bd5e224cf76d6ef26_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cli-artifacts@sha256:f5fdcb9890b1c5104c32e6e4ca376a79321e1aa9db453d3c2b6a95e28b7bb385_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cli@sha256:6f2b3f9c9182b9524876c501bf1fe4542f4daae94fe6c06574d487c1dd0b6954_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • +77 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562 (For s390x architecture) The image digest is sha256:40b71fe36c61947919d895b9479c21dc2f6ab09f15c611133de78b2d3047bbd3 (For ppc64le architecture) The image digest is sha256:c0196c6c168b95947cc3852b6a1977fb89d62dd1c0842a5024fa81661cd54217 (For aarch64 architecture) The image digest is sha256:157c71cc0c365470e611a4ace40b1099f3d3ced53235ffae4ce3096c047353d6 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html Workaround: In some environments where http/2 support is not required, it may be possible to disable this feature to reduce risk.

🔗 References (27)