RHSA-2024:3494MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.43 security update

Published
June 5, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-41723 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:667683157fef95bcf552efbcf535f0e769f0a8d9fbe49ee2d044c3534c2c03df_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:7c94f7d78e1e09b17385379bf9485f5f8e4d0c947f2ab3ec914a559fd6c39394_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:ae76368205ef9c9fa1eccc31c97a1e591ddbc171483ec401e64803f785157239_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:e018ef5af825cb400dc7ccda421fc05717e23c6d04365ff1733a75cc5bb1d846_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:148c3feacca9c273d0062dc5570f5aff1e73bece008c38888c1884cd069d7d3b_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:934a116e6b209b5a7fed98d0c50fd960b319b06ad62bec669cc141148aead402_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:a5ffcaf30255585ff5965424e2470f778d47876a5ddac9ef75d8216daaef5d7f_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:ae1153362f3599b12584d0254699f6a3c5e5eb434ed6293c3550b7a5e87950aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:1ca851eecaee33c0efe360ba38ff71db17866a1997b2407fa3449c5de17ccb47_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:6bffb74d6c39408843ce4dc0eb867b33a813960c61a3f721fb00209ac874c0f9_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:947d39c278494bd5b710834beae195ea1b90ceb303634d16aea70c9c0b788c91_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:e8ded6b5f68d05d2badc4c582d790e640b75a6ca3cfabf131b11950090f51a64_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:14381217448d949256113eae9538ff999e54cdf223bd18646b75fdd8bc2155a2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:1eb3fda05c27c1aea9ff32f7eecc85f58964c4579c0b175a6d8d297455621cef_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:3ab01c6c4e19da7c0f8ac57459ebe63054131eb0acf5f2b51922c12c2f10f8d8_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:ba955511bad0d787b7fddf4386775802d549e39dffd317496a8828cd4ffaf2af_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:3cc27e7b5cbb6ab5241527b8eb1fe096c493a28f2902711d9a41f32cd67a4891_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:437c21a8ada0af88ece60aa3815a3759561981277e66cbce9656a7c44ce1d739_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:afa7cb581bec7d6a61c1502c2b902e7b98ae09f8d8f81b40d55061a058bbbebb_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:cbd07d32ba7bfc171b0970cf50d5751a39d85937cd4b68ab6f1effa56ed6f8d9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/oc-mirror-plugin-rhel8@sha256:dcae8395302cdfb3eb4a55b1357acbab75d40dd1668db4af3cb1169e749c9066_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:3971fa2886c38c055d3537ebfe62528d82aa20eabfeb7e5d6ebf7f6b595664df_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:c656ccc82bf3f977b15a1137ea2ceef685711657dc7dc6a23a99471dec2c8342_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:c7abc176f1ea5fecfe2f528baf93c2cfda3e21cd2cb3629f273cab1dcca85ffa_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:d5f1fcff9fa19a340a729483b1b613c1347cb8bb1115f0db060ad6753f543b0b_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:74531ef4382b2a8dd1b2a6b753dd2fdf931fa67cf76b363af9f8d0d5138680bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:87786db3ded09abb2366269ba7251d07aacb0c62b902430b8fa3bf4fb955f72a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:f45b9c350be4bab2bfe8dc7e852957e95b7fd996558dcdc82c51819cb49d95bc_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:feccf237f6511b7b6ea810c6e05488f98d43b587b53fcc79eea5747ff4af3b96_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:d0da3d9b016e6d693a61c9425598921b6d0da99c52cb0f3404f6dbc126149e5d (For s390x architecture) The image digest is sha256:f6568685632f8246258dd89e202938bc92841e78d4d014b1dbb74cfa23cdd42a (For ppc64le architecture) The image digest is sha256:1fc2db32bf33d582602c81c349f22c5080c785f0230f9e6a2ede9e32928d7dd6 (For aarch64 architecture) The image digest is sha256:f9f4638671fd0de844668577c91782c186acbd7a11a3192033801bb422ae40cf All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

🔗 References (14)