RHSA-2023:1655
- Source
- https://access.redhat.com/errata/RHSA-2023:1655
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2023:1655.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2023:1655
- Related
- Published
- 2024-09-30T07:06:40Z
- Modified
- 2024-10-28T20:06:01Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2023:1655
- https://access.redhat.com/security/updates/classification/#critical
- https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2127804
- https://bugzilla.redhat.com/show_bug.cgi?id=2135435
- https://bugzilla.redhat.com/show_bug.cgi?id=2162200
- https://bugzilla.redhat.com/show_bug.cgi?id=2162206
- https://bugzilla.redhat.com/show_bug.cgi?id=2164278
- https://bugzilla.redhat.com/show_bug.cgi?id=2177626
- https://bugzilla.redhat.com/show_bug.cgi?id=2177629
- https://bugzilla.redhat.com/show_bug.cgi?id=2177632
- https://bugzilla.redhat.com/show_bug.cgi?id=2177634
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1655.json
- https://access.redhat.com/security/cve/CVE-2022-3172
- https://www.cve.org/CVERecord?id=CVE-2022-3172
- https://nvd.nist.gov/vuln/detail/CVE-2022-3172
- https://github.com/kubernetes/kubernetes/issues/112513
- https://access.redhat.com/security/cve/CVE-2022-31690
- https://www.cve.org/CVERecord?id=CVE-2022-31690
- https://nvd.nist.gov/vuln/detail/CVE-2022-31690
- https://spring.io/security/cve-2022-31690
- https://access.redhat.com/security/cve/CVE-2022-31692
- https://www.cve.org/CVERecord?id=CVE-2022-31692
- https://nvd.nist.gov/vuln/detail/CVE-2022-31692
- https://spring.io/security/cve-2022-31692
- https://access.redhat.com/security/cve/CVE-2022-42889
- https://www.cve.org/CVERecord?id=CVE-2022-42889
- https://nvd.nist.gov/vuln/detail/CVE-2022-42889
- https://blogs.apache.org/security/entry/cve-2022-42889
- https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
- https://seclists.org/oss-sec/2022/q4/22
- https://access.redhat.com/security/cve/CVE-2023-24422
- https://www.cve.org/CVERecord?id=CVE-2023-24422
- https://nvd.nist.gov/vuln/detail/CVE-2023-24422
- https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016
- https://access.redhat.com/security/cve/CVE-2023-25725
- https://bugzilla.redhat.com/show_bug.cgi?id=2169089
- https://www.cve.org/CVERecord?id=CVE-2023-25725
- https://nvd.nist.gov/vuln/detail/CVE-2023-25725
- https://www.haproxy.com/blog/february-2023-header-parser-fixed/
- https://www.mail-archive.com/haproxy@formilux.org/msg43229.html
- https://access.redhat.com/security/cve/CVE-2023-27898
- https://www.cve.org/CVERecord?id=CVE-2023-27898
- https://nvd.nist.gov/vuln/detail/CVE-2023-27898
- https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3037
- https://access.redhat.com/security/cve/CVE-2023-27899
- https://www.cve.org/CVERecord?id=CVE-2023-27899
- https://nvd.nist.gov/vuln/detail/CVE-2023-27899
- https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2823
- https://access.redhat.com/security/cve/CVE-2023-27903
- https://www.cve.org/CVERecord?id=CVE-2023-27903
- https://nvd.nist.gov/vuln/detail/CVE-2023-27903
- https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058
- https://access.redhat.com/security/cve/CVE-2023-27904
- https://www.cve.org/CVERecord?id=CVE-2023-27904
- https://nvd.nist.gov/vuln/detail/CVE-2023-27904
- https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120
Affected packages
Red Hat:openshift:4.10::el7 / openshift
Package
- Name
- openshift
- Purl
- pkg:rpm/redhat/openshift
Red Hat:openshift:4.10::el7 / openshift-hyperkube
Package
- Name
- openshift-hyperkube
- Purl
- pkg:rpm/redhat/openshift-hyperkube
Red Hat:openshift:4.10::el8 / openshift
Package
- Name
- openshift
- Purl
- pkg:rpm/redhat/openshift
Red Hat:openshift:4.10::el8 / openshift-hyperkube
Package
- Name
- openshift-hyperkube
- Purl
- pkg:rpm/redhat/openshift-hyperkube
Red Hat:openshift:4.10::el8 / jenkins
Package
- Name
- jenkins
- Purl
- pkg:rpm/redhat/jenkins
Red Hat:openshift:4.10::el8 / jenkins-2-plugins
Package
- Name
- jenkins-2-plugins
- Purl
- pkg:rpm/redhat/jenkins-2-plugins
Red Hat:openshift:4.10::el8 / haproxy
Package
- Name
- haproxy
- Purl
- pkg:rpm/redhat/haproxy
Red Hat:openshift:4.10::el8 / haproxy-debugsource
Package
- Name
- haproxy-debugsource
- Purl
- pkg:rpm/redhat/haproxy-debugsource
Red Hat:openshift:4.10::el8 / haproxy22
Package
- Name
- haproxy22
- Purl
- pkg:rpm/redhat/haproxy22