RHSA-2023:3366
RHSA-2023:3366 · Red Hat Security Advisory: OpenShift Container Platform 4.13.2 packages and security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: OpenShift Container Platform 4.13.2 packages and security update
CVSS 9.8 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
openshift-clients Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el8
Update to 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el8
openshift-clients-redistributable Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el8
Update to 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el8
openshift-clients Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el9
Update to 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el9
openshift-clients-redistributable Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el9
Update to 0:4.13.0-202305291355.p0.g1024efc.assembly.stream.el9
cri-o Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-7.rhaos4.13.gitec064c9.el8
Update to 0:1.26.3-7.rhaos4.13.gitec064c9.el8
cri-o-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-7.rhaos4.13.gitec064c9.el8
Update to 0:1.26.3-7.rhaos4.13.gitec064c9.el8
cri-o-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-7.rhaos4.13.gitec064c9.el8
Update to 0:1.26.3-7.rhaos4.13.gitec064c9.el8
openshift Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el8
Update to 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el8
openshift-hyperkube Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el8
Update to 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el8
cri-o Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-8.rhaos4.13.gitec064c9.el9
Update to 0:1.26.3-8.rhaos4.13.gitec064c9.el9
cri-o-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-8.rhaos4.13.gitec064c9.el9
Update to 0:1.26.3-8.rhaos4.13.gitec064c9.el9
cri-o-debugsource Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.3-8.rhaos4.13.gitec064c9.el9
Update to 0:1.26.3-8.rhaos4.13.gitec064c9.el9
cri-tools Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-2.el9
Update to 0:1.26.0-2.el9
cri-tools-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-2.el9
Update to 0:1.26.0-2.el9
cri-tools-debugsource Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.0-2.el9
Update to 0:1.26.0-2.el9
openshift Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el9
Update to 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el9
openshift-hyperkube Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el9
Update to 0:4.13.0-202305301919.p0.g0001a21.assembly.stream.el9
bpftool Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.16.1.el9_2
Update to 0:7.0.0-284.16.1.el9_2
bpftool-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.16.1.el9_2
Update to 0:7.0.0-284.16.1.el9_2
buildah Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-1.1.rhaos4.13.el9
Update to 1:1.29.1-1.1.rhaos4.13.el9
buildah-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-1.1.rhaos4.13.el9
Update to 1:1.29.1-1.1.rhaos4.13.el9
buildah-debugsource Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-1.1.rhaos4.13.el9
Update to 1:1.29.1-1.1.rhaos4.13.el9
buildah-tests Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-1.1.rhaos4.13.el9
Update to 1:1.29.1-1.1.rhaos4.13.el9
buildah-tests-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 1:1.29.1-1.1.rhaos4.13.el9
Update to 1:1.29.1-1.1.rhaos4.13.el9
Original sources
- https://access.redhat.com/errata/RHSA-2023:3366
- https://access.redhat.com/security/updates/classification/#important
- https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2064702
- https://bugzilla.redhat.com/show_bug.cgi?id=2178492
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027
- https://bugzilla.redhat.com/show_bug.cgi?id=2203008
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3366.json
- https://access.redhat.com/security/cve/CVE-2022-27191
- https://www.cve.org/CVERecord?id=CVE-2022-27191
- https://nvd.nist.gov/vuln/detail/CVE-2022-27191
- https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ
- https://access.redhat.com/security/cve/CVE-2022-41722
- https://www.cve.org/CVERecord?id=CVE-2022-41722
- https://nvd.nist.gov/vuln/detail/CVE-2022-41722
- https://access.redhat.com/security/cve/CVE-2022-41724
- https://www.cve.org/CVERecord?id=CVE-2022-41724
- https://nvd.nist.gov/vuln/detail/CVE-2022-41724
- https://go.dev/cl/468125
- https://go.dev/issue/58001
- https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E
- https://pkg.go.dev/vuln/GO-2023-1570
- https://access.redhat.com/security/cve/CVE-2023-24534
- https://osv.dev/vulnerability/RHSA-2023:3366