Red Hat Security Advisory: OpenShift Container Platform 4.13.0 bug fix and security update

Fixed packages 5

Vulnerabilities 2

• Medium 5.3
  CVE-2022-41717 Public exploit

  Excessive memory growth in net/http and golang.org/x/net/http2

  An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 8, 2022
• Unscored —
  CVE-2022-41724

  Panic on large handshake records in crypto/tls

  Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…

  Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/microshift/4.13/html/release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2161274
• article
  https://issues.redhat.com/browse/OCPBUGS-10223
• article
  https://issues.redhat.com/browse/OCPBUGS-10242
• article
  https://issues.redhat.com/browse/OCPBUGS-10243
• article
  https://issues.redhat.com/browse/OCPBUGS-10251
• article
  https://issues.redhat.com/browse/OCPBUGS-10253
• article
  https://issues.redhat.com/browse/OCPBUGS-10254
• article
  https://issues.redhat.com/browse/OCPBUGS-10256
• article
  https://issues.redhat.com/browse/OCPBUGS-10617
• article
  https://issues.redhat.com/browse/OCPBUGS-10791
• article
  https://issues.redhat.com/browse/OCPBUGS-11295
• article
  https://issues.redhat.com/browse/OCPBUGS-11412
• article
  https://issues.redhat.com/browse/OCPBUGS-11497
• article
  https://issues.redhat.com/browse/OCPBUGS-11593
• article
  https://issues.redhat.com/browse/OCPBUGS-11660
• article
  https://issues.redhat.com/browse/OCPBUGS-11811
• article
  https://issues.redhat.com/browse/OCPBUGS-13023
• article
  https://issues.redhat.com/browse/OCPBUGS-2869
• article
  https://issues.redhat.com/browse/OCPBUGS-3635
• article
  https://issues.redhat.com/browse/OCPBUGS-4198
• article
  https://issues.redhat.com/browse/OCPBUGS-4323
• article
  https://issues.redhat.com/browse/OCPBUGS-4577
• article
  https://issues.redhat.com/browse/OCPBUGS-4657
• article
  https://issues.redhat.com/browse/OCPBUGS-4658
• article
  https://issues.redhat.com/browse/OCPBUGS-5537
• article
  https://issues.redhat.com/browse/OCPBUGS-5858
• article
  https://issues.redhat.com/browse/OCPBUGS-5908
• article
  https://issues.redhat.com/browse/OCPBUGS-6173
• article
  https://issues.redhat.com/browse/OCPBUGS-6858
• article
  https://issues.redhat.com/browse/OCPBUGS-6860
• article
  https://issues.redhat.com/browse/OCPBUGS-6864
• article
  https://issues.redhat.com/browse/OCPBUGS-7444
• article
  https://issues.redhat.com/browse/OCPBUGS-8338
• article
  https://issues.redhat.com/browse/OCPBUGS-8493
• article
  https://issues.redhat.com/browse/OCPBUGS-8704
• article
  https://issues.redhat.com/browse/OCPBUGS-9965
• article
  https://issues.redhat.com/browse/OCPBUGS-9999