RHSA-2023:5675
RHSA-2023:5675 · Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
openshift Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el8
Update to 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el8
openshift-hyperkube Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el8
Update to 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el8
openshift Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el9
Update to 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el9
openshift-hyperkube Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el9
Update to 0:4.13.0-202310140746.p0.gc7606e7.assembly.stream.el9
containers-common Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 3:1-36.rhaos4.13.el8
Update to 3:1-36.rhaos4.13.el8
crun Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el8
Update to 0:1.9.2-1.rhaos4.13.el8
crun-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el8
Update to 0:1.9.2-1.rhaos4.13.el8
crun-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el8
Update to 0:1.9.2-1.rhaos4.13.el8
openshift-ansible Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8
Update to 0:4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8
openshift-ansible-test Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8
Update to 0:4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8
openshift-clients Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310130726.p0.g717d4a5.assembly.stream.el8
Update to 0:4.13.0-202310130726.p0.g717d4a5.assembly.stream.el8
openshift-clients-redistributable Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202310130726.p0.g717d4a5.assembly.stream.el8
Update to 0:4.13.0-202310130726.p0.g717d4a5.assembly.stream.el8
runc Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 4:1.1.9-1.rhaos4.13.el8
Update to 4:1.1.9-1.rhaos4.13.el8
runc-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 4:1.1.9-1.rhaos4.13.el8
Update to 4:1.1.9-1.rhaos4.13.el8
runc-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 4:1.1.9-1.rhaos4.13.el8
Update to 4:1.1.9-1.rhaos4.13.el8
bpftool Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.36.1.el9_2
Update to 0:7.0.0-284.36.1.el9_2
bpftool-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.36.1.el9_2
Update to 0:7.0.0-284.36.1.el9_2
containers-common Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 3:1-36.rhaos4.13.el9
Update to 3:1-36.rhaos4.13.el9
crun Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el9
Update to 0:1.9.2-1.rhaos4.13.el9
crun-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el9
Update to 0:1.9.2-1.rhaos4.13.el9
crun-debugsource Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.9.2-1.rhaos4.13.el9
Update to 0:1.9.2-1.rhaos4.13.el9
kernel Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.36.1.el9_2
Update to 0:5.14.0-284.36.1.el9_2
kernel-64k Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.36.1.el9_2
Update to 0:5.14.0-284.36.1.el9_2
kernel-64k-core Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.36.1.el9_2
Update to 0:5.14.0-284.36.1.el9_2
Original sources
- https://access.redhat.com/errata/RHSA-2023:5675
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5675.json
- https://access.redhat.com/security/cve/CVE-2023-39325
- https://www.cve.org/CVERecord?id=CVE-2023-39325
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325
- https://access.redhat.com/security/cve/CVE-2023-44487
- https://go.dev/issue/63417
- https://pkg.go.dev/vuln/GO-2023-2102
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803
- https://www.cve.org/CVERecord?id=CVE-2023-44487
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/dotnet/announcements/issues/277
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://osv.dev/vulnerability/RHSA-2023:5675