RHSA-2023:7325
RHSA-2023:7325 · Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
cri-o Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el8
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el8
cri-o-debuginfo Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el8
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el8
cri-o-debugsource Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el8
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el8
openshift-clients Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el8
Update to 0:4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el8
openshift-clients-redistributable Red Hat:openshift:4.13::el8
- Affected ranges
- ECOSYSTEM: < 0:4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el8
Update to 0:4.13.0-202311151332.p0.gc7c6eb2.assembly.stream.el8
bpftool Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.41.1.el9_2
Update to 0:7.0.0-284.41.1.el9_2
bpftool-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:7.0.0-284.41.1.el9_2
Update to 0:7.0.0-284.41.1.el9_2
cri-o Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el9
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el9
cri-o-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el9
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el9
cri-o-debugsource Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:1.26.4-5.1.rhaos4.13.git969e013.el9
Update to 0:1.26.4-5.1.rhaos4.13.git969e013.el9
kernel Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-core Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-core Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-devel Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-devel-matched Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-modules Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-modules-core Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-modules-extra Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-modules-internal Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debug-modules-partner Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
kernel-64k-debuginfo Red Hat:openshift:4.13::el9
- Affected ranges
- ECOSYSTEM: < 0:5.14.0-284.41.1.el9_2
Update to 0:5.14.0-284.41.1.el9_2
Original sources
- https://access.redhat.com/errata/RHSA-2023:7325
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7325.json
- https://access.redhat.com/security/cve/CVE-2023-39325
- https://www.cve.org/CVERecord?id=CVE-2023-39325
- https://nvd.nist.gov/vuln/detail/CVE-2023-39325
- https://access.redhat.com/security/cve/CVE-2023-44487
- https://go.dev/issue/63417
- https://pkg.go.dev/vuln/GO-2023-2102
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://www.cve.org/CVERecord?id=CVE-2023-44487
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/dotnet/announcements/issues/277
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://osv.dev/vulnerability/RHSA-2023:7325