Read the docs
TI-2023-20466 Aliases CVE-2023-39325GHSA-4374-p667-p6c8

HTTP/2 rapid reset can cause excessive work in net/http

Priority LOW 39CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 116 fixed, 32 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-770.

Summary

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.

Why it matters now

EPSS 0.03796 90th percentileScored 2026-11-07
Fix Partial net/http (Go standard library): 1.20.10, 1.21.3golang.org/x/net/http2 (golang.org/x/net): 0.17.0+1 more productRed Hat: 207 advisoriesRed Hat: 116 fixed, 32 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarynet/httpbefore 1.20.10; 1.21.0-0 to before 1.21.31.20.10, 1.21.3Patch availableCNA
Go standard librarygolang.org/x/net/http2before 0.17.00.17.0Patch availableCNA
—golang.org/x/net (Go)before 0.17.00.17.0Patch availableGHSA-4374-p667-p6c8
  • net/http VendorGo standard library Affected before 1.20.10; 1.21.0-0 to before 1.21.3 Fixed in 1.20.10, 1.21.3 Patch available CNA
  • golang.org/x/net/http2 VendorGo standard library Affected before 0.17.0 Fixed in 0.17.0 Patch available CNA
  • golang.org/x/net (Go) Vendor— Affected before 0.17.0 Fixed in 0.17.0 Patch available GHSA-4374-p667-p6c8

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*1.20.0 to before 1.20.10; 1.21.0 to before 1.21.3VulnerableGo standard library
cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:*before 0.17.0VulnerableGo standard library
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*39VulnerableFedoraproject
cpe:2.3:a:netapp:astra_trident:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:astra_trident_autosupport:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions 1.20.0 to before 1.20.10; 1.21.0 to before 1.21.3 Vulnerable ·Go standard library
  • cpe:2.3:a:golang:http2:*:*:*:*:*:go:*:* Versions before 0.17.0 Vulnerable ·Go standard library
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
  • cpe:2.3:a:netapp:astra_trident:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:astra_trident_autosupport:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

  • Fix · CNA net/http (Go standard library) Fixed in 1.20.10, 1.21.3
  • Fix · CNA golang.org/x/net/http2 (golang.org/x/net) Fixed in 0.17.0
  • Fix · GHSA-4374-p667-p6c8 golang.org/x/net (Go) Fixed in 0.17.0 Advisory →

Red Hat 207 advisories

  • RHSA-2026:8322 Released 2026-04-15 · Red Hat rating Critical
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.2
  • RHSA-2025:4240 Released 2025-04-28 · Red Hat rating Important
    Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
  • RHSA-2025:1116 Released 2025-02-13 · Red Hat rating Important
    OpenShift Container Platform 4.13.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-baremetal-machine-controllers, openshift4/ose-ibmcloud-machine-controllers-rhel8, openshift4/ose-nutanix-cloud-controller-manager-rhel8 +4
Show 204 more Red Hat advisories
  • RHSA-2025:0832 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.72 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-baremetal-machine-controllers, openshift4/ose-nutanix-machine-controllers-rhel8, openshift4/ose-openshift-apiserver-rhel8 +3
  • RHSA-2025:0014 Released 2025-01-09 · Red Hat rating Important
    OpenShift Container Platform 4.12.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-samples-operator, openshift4/ose-console
  • RHSA-2024:10813 Released 2024-12-12 · Red Hat rating Important
    OpenShift Container Platform 4.13.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-cluster-samples-operator, openshift4/ose-console +1
  • RHSA-2024:10523 Released 2024-12-05 · Red Hat rating Important
    OpenShift Container Platform 4.14.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-nutanix-cloud-controller-manager-rhel8, openshift4/ose-nutanix-machine-controllers-rhel8
  • RHSA-2024:10142 Released 2024-11-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-nutanix-cloud-controller-manager-rhel9
  • RHSA-2024:6755 Released 2024-09-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/ocs-client-console-rhel9 +7
  • RHSA-2024:4631 Released 2024-07-18 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.15.0 release
    • Red Hat OpenShift Dev Spaces 3 devspaces/configbump-rhel8, devspaces/dashboard-rhel8, devspaces/devspaces-rhel8-operator +4
  • RHSA-2024:4118 Released 2024-06-26 · Red Hat rating Moderate
    Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update
    • Red Hat Ceph Storage 5.3 MON ceph-2:16.2.10-266.el8cp, ceph-base-2:16.2.10-266.el8cp, ceph-common-2:16.2.10-266.el8cp +30
    • Red Hat Ceph Storage 5.3 OSD ceph-2:16.2.10-266.el8cp, ceph-base-2:16.2.10-266.el8cp, ceph-common-2:16.2.10-266.el8cp +20
    • Red Hat Ceph Storage 5.3 Tools ceph-2:16.2.10-266.el8cp, ceph-2:16.2.10-266.el9cp, ceph-ansible-6.0.28.8-1.el8cp +47
  • RHSA-2024:3927 Released 2024-06-13 · Red Hat rating Moderate
    Red Hat Ceph Storage 7.1 container image security, and bug fix update
    • Red Hat Ceph Storage 7.1 Tools rhceph/ceph-nvmeof-cli-rhel9, rhceph/ceph-nvmeof-rhel9, rhceph/grafana-rhel9 +5
  • RHSA-2024:1765 Released 2024-04-18 · Red Hat rating Important
    OpenShift Container Platform 4.14.21 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-baremetal-machine-controllers, openshift4/ose-cluster-samples-operator, openshift4/ose-kubevirt-cloud-controller-manager-rhel8 +1
  • RHSA-2024:1770 Released 2024-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.15.9 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2024:1572 Released 2024-04-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-console-operator
  • RHSA-2024:1464 Released 2024-03-27 · Red Hat rating Important
    OpenShift Container Platform 4.11.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-alibaba-cloud-controller-manager-rhel8, openshift4/ose-k8s-prometheus-adapter
  • RHSA-2024:1449 Released 2024-03-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.5 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-kubevirt-cloud-controller-manager-rhel9, openshift4/ose-operator-registry-rhel9
  • RHSA-2024:1454 Released 2024-03-27 · Red Hat rating Important
    OpenShift Container Platform 4.13.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-console-operator
  • RHSA-2024:1458 Released 2024-03-27 · Red Hat rating Important
    OpenShift Container Platform 4.14.18 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-hypershift-rhel8, openshift4/ose-kubevirt-cloud-controller-manager-rhel8, openshift4/ose-operator-registry
  • RHSA-2024:1210 Released 2024-03-13 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.2 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:1037 Released 2024-03-06 · Red Hat rating Important
    OpenShift Container Platform 4.13.36 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-console-operator
  • RHSA-2024:0302 Released 2024-03-06 · Red Hat rating Important
    Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update
    • KDO 5.0 for RHEL 9 kube-descheduler-operator/descheduler-rhel9, kube-descheduler-operator/kube-descheduler-operator-bundle, kube-descheduler-operator/kube-descheduler-rhel9-operator
  • RHSA-2024:1052 Released 2024-03-06 · Red Hat rating Critical
    OpenShift Container Platform 4.12.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-oauth-apiserver-rhel8, openshift4/ose-olm-rukpak-rhel8
  • RHSA-2024:0946 Released 2024-02-28 · Red Hat rating Important
    OpenShift Container Platform 4.13.35 security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-oauth-apiserver-rhel8
  • RHSA-2024:0766 Released 2024-02-28 · Red Hat rating Critical
    OpenShift Container Platform 4.15.0 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-efs-csi-driver-container-rhel8, openshift4/ose-aws-efs-csi-driver-rhel8-operator, openshift4/ose-ptp-rhel9-operator
  • RHSA-2024:0941 Released 2024-02-28 · Red Hat rating Important
    OpenShift Container Platform 4.14.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-console-operator
  • RHSA-2024:0269 Released 2024-02-28 · Red Hat rating Moderate
    Run Once Duration Override Operator for Red Hat OpenShift 1.1.0 for RHEL 9
    • RODOO 1.1 for RHEL 9 run-once-duration-override-operator/run-once-duration-override-operator-bundle, run-once-duration-override-operator/run-once-duration-override-rhel9, run-once-duration-override-operator/run-once-duration-override-rhel9-operator
  • RHSA-2023:7200 Released 2024-02-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.z security update
    • Red Hat OpenShift Container Platform 4.15 microshift-4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9, microshift-greenboot-4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9, microshift-networking-4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 +3
  • RHSA-2023:7201 Released 2024-02-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.0 packages and security update
    • Red Hat OpenShift Container Platform 4.15 buildah-1:1.29.1-20.2.rhaos4.15.el8, buildah-1:1.29.1-20.2.rhaos4.15.el9, buildah-tests-1:1.29.1-20.2.rhaos4.15.el8 +37
  • RHSA-2023:7198 Released 2024-02-27 · Red Hat rating Critical
    OpenShift Container Platform 4.15.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2024:0954 Released 2024-02-27 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 10.15.0 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2024:0833 Released 2024-02-21 · Red Hat rating Critical
    OpenShift Container Platform 4.12.50 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-alibaba-cloud-controller-manager-rhel8, openshift4/ose-cluster-authentication-operator, openshift4/ose-operator-lifecycle-manager +4
  • RHSA-2024:0837 Released 2024-02-20 · Red Hat rating Important
    OpenShift Container Platform 4.14.13 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-oauth-apiserver-rhel8
  • RHSA-2024:0741 Released 2024-02-14 · Red Hat rating Critical
    OpenShift Container Platform 4.13.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/egress-router-cni-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-cluster-authentication-operator +3
  • RHSA-2024:0777 Released 2024-02-12 · Red Hat rating Important
    jenkins and jenkins-2-plugins security update
    • OpenShift Developer Tools and Services for OCP 4.14 jenkins-2-plugins-4.14.1706516441-1.el8, jenkins-2.426.3.1706516352-3.el8
  • RHSA-2024:0664 Released 2024-02-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.49 bug fix update and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-machine-api-provider-aws-rhel8, openshift4/ose-openshift-apiserver-rhel8
  • RHSA-2024:0682 Released 2024-02-08 · Red Hat rating Important
    OpenShift Container Platform 4.11.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-cluster-network-operator, openshift4/ose-machine-api-provider-aws-rhel8, openshift4/ose-operator-lifecycle-manager
  • RHSA-2024:0642 Released 2024-02-07 · Red Hat rating Critical
    OpenShift Container Platform 4.14.11 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-azure-cluster-api-controllers-rhel8, openshift4/ose-cluster-api-rhel8 +7
  • RHSA-2024:0660 Released 2024-02-07 · Red Hat rating Important
    OpenShift Container Platform 4.13.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-sdn-rhel8, openshift4/ose-thanos-rhel8
  • RHSA-2024:0484 Released 2024-02-01 · Red Hat rating Important
    OpenShift Container Platform 4.13.31 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-alibaba-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8
  • RHSA-2024:0485 Released 2024-01-31 · Red Hat rating Important
    OpenShift Container Platform 4.12.48 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:0306 Released 2024-01-24 · Red Hat rating Important
    OpenShift Container Platform 4.11.57 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-aws-pod-identity-webhook-rhel8
  • RHSA-2024:0290 Released 2024-01-23 · Red Hat rating Important
    OpenShift Container Platform 4.14.10 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-workload-identity-webhook-rhel8, openshift4/ose-installer
  • RHSA-2024:0198 Released 2024-01-17 · Red Hat rating Important
    OpenShift Container Platform 4.12.47 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-aws-pod-identity-webhook-rhel8, openshift4/ose-k8s-prometheus-adapter, openshift4/ose-machine-api-provider-aws-rhel8 +1
  • RHSA-2024:0193 Released 2024-01-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.29 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-pod-identity-webhook-rhel8, openshift4/ose-cluster-network-operator, openshift4/ose-operator-lifecycle-manager
  • RHSA-2024:0273 Released 2024-01-17 · Red Hat rating Important
    OpenShift Virtualization 4.12.9 Images security and bug fix update
    • CNV 4.12 for RHEL 8 container-native-virtualization/bridge-marker, container-native-virtualization/cluster-network-addons-operator, container-native-virtualization/hostpath-csi-driver +9
  • RHSA-2024:0059 Released 2024-01-10 · Red Hat rating Important
    OpenShift Container Platform 4.11.56 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-aws-cluster-api-controllers-rhel8, openshift4/ose-cluster-autoscaler-operator, openshift4/ose-gcp-cloud-controller-manager-rhel8 +5
  • RHSA-2024:0050 Released 2024-01-09 · Red Hat rating Important
    OpenShift Container Platform 4.14.8 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-alibaba-cloud-controller-manager-rhel8, openshift4/ose-cluster-olm-operator-rhel8, openshift4/ose-olm-operator-controller-rhel8
  • RHSA-2023:7823 Released 2024-01-04 · Red Hat rating Important
    OpenShift Container Platform 4.12.46 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-azure-cloud-node-manager-rhel8, openshift4/ose-cluster-autoscaler-operator, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8 +9
  • RHSA-2023:7827 Released 2024-01-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.z security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-cloud-controller-manager-operator-rhel8, openshift4/ose-ibm-cloud-controller-manager-rhel8, openshift4/ose-machine-api-provider-aws-rhel8
  • RHSA-2023:7831 Released 2024-01-03 · Red Hat rating Important
    OpenShift Container Platform 4.14.7 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-cluster-network-operator, openshift4/ose-ibm-cloud-controller-manager-rhel8, openshift4/ose-operator-registry +4
  • RHSA-2023:7691 Released 2023-12-13 · Red Hat rating Important
    OpenShift Container Platform 4.11.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-azure-cluster-api-controllers-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-api-rhel8 +14
  • RHSA-2023:7690 Released 2023-12-13 · Red Hat rating Important
    OpenShift Container Platform 4.11.55 security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/kubernetes-nmstate-rhel8-operator, openshift4/ose-sriov-dp-admission-controller
  • RHSA-2023:7687 Released 2023-12-13 · Red Hat rating Important
    OpenShift Container Platform 4.13.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-gcp-cloud-controller-manager-rhel8, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8, openshift4/ose-multus-whereabouts-ipam-cni-rhel8 +1
  • RHSA-2023:7741 Released 2023-12-12 · Red Hat rating Important
    Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update
    • Red Hat Ceph Storage 6.1 Tools rhceph/rhceph-6-dashboard-rhel9
  • RHSA-2023:7682 Released 2023-12-12 · Red Hat rating Important
    OpenShift Container Platform 4.14.6 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-gcp-cloud-controller-manager-rhel8, openshift4/ose-prometheus
  • RHSA-2023:7710 Released 2023-12-11 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 7.2.0 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel8-operator
  • RHSA-2023:7704 Released 2023-12-07 · Red Hat rating Important
    OpenShift Virtualization 4.14.1 security and bug fix update
    • CNV 4.14 for RHEL 9 container-native-virtualization/bridge-marker-rhel9, container-native-virtualization/cluster-network-addons-operator-rhel9, container-native-virtualization/hostpath-csi-driver-rhel9 +15
  • RHSA-2023:7703 Released 2023-12-07 · Red Hat rating Important
    Red Hat OpenShift Pipelines 1.10.6 release and security update
    • OpenShift Pipelines version 1.10 for RHEL 8 openshift-pipelines/pipelines-chains-controller-rhel8, openshift-pipelines/pipelines-cli-tkn-rhel8, openshift-pipelines/pipelines-controller-rhel8 +21
  • RHSA-2023:7699 Released 2023-12-07 · Red Hat rating Important
    Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
    • OpenShift Pipelines version 1.10 for RHEL 8 openshift-pipelines-client-1.10.6-11031.el8
  • RHSA-2023:7610 Released 2023-12-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.45 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.12 python-werkzeug-2.0.3-5.el9, python3-werkzeug-2.0.3-5.el9
    • Red Hat OpenShift Container Platform 4.12 bpftool-4.18.0-372.82.1.el8_6, cri-o-1.25.5-2.rhaos4.12.git0217273.el8, kernel-4.18.0-372.82.1.el8_6 +47
  • RHSA-2023:7608 Released 2023-12-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-aws-cluster-api-controllers-rhel8, openshift4/ose-azure-cluster-api-controllers-rhel8, openshift4/ose-cloud-credential-operator +16
  • RHSA-2023:7607 Released 2023-12-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.45 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/kubernetes-nmstate-rhel8-operator, openshift4/ose-aws-efs-csi-driver-rhel8-operator, openshift4/ose-cluster-capacity +6
  • RHSA-2023:7604 Released 2023-12-06 · Red Hat rating Important
    OpenShift Container Platform 4.13.25 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-azure-cloud-node-manager-rhel8, openshift4/ose-cluster-autoscaler-operator, openshift4/ose-machine-api-provider-azure-rhel8 +3
  • RHSA-2023:7662 Released 2023-12-06 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 6.0.3 security update
    • Red Hat OpenShift Container Platform 4.11 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel8-operator
  • RHSA-2023:7602 Released 2023-12-06 · Red Hat rating Important
    OpenShift Container Platform 4.13.25 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-sriov-dp-admission-controller
  • RHSA-2023:7599 Released 2023-12-05 · Red Hat rating Important
    OpenShift Container Platform 4.14.5 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-multus-networkpolicy-rhel8, openshift4/ose-openshift-apiserver-rhel8, openshift4/ose-operator-registry
  • RHSA-2023:7470 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.14.4 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-cloud-node-manager-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8 +7
  • RHSA-2023:7469 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.14.4 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-efs-csi-driver-rhel8-operator, openshift4/ose-clusterresourceoverride-rhel8, openshift4/ose-clusterresourceoverride-rhel8-operator +1
  • RHSA-2023:7481 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.11.54 packages and security update
    • Red Hat OpenShift Container Platform 4.11 bpftool-4.18.0-372.82.1.el8_6, cri-o-1.24.6-6.1.rhaos4.11.git7f73171.el8_6, kernel-4.18.0-372.82.1.el8_6 +42
  • RHSA-2023:7475 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.13.24 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-cluster-api-controllers-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-machine-approver +3
  • RHSA-2023:7479 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.11.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-azure-disk-csi-driver-rhel8-operator, openshift4/ose-cluster-config-operator +28
  • RHSA-2023:7478 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.11.54 security and extras update
    • Red Hat OpenShift Container Platform 4.11 openshift-tech-preview/metallb-rhel8, openshift4/metallb-rhel8, openshift4/metallb-rhel8-operator +10
  • RHSA-2023:7474 Released 2023-11-29 · Red Hat rating Important
    OpenShift Container Platform 4.13.24 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-ptp-operator
  • RHSA-2023:7555 Released 2023-11-28 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.3.0 security update
    • 9Base-OADP-1.3 oadp/oadp-kubevirt-velero-plugin-rhel9, oadp/oadp-mustgather-rhel9, oadp/oadp-operator-bundle +8
  • RHSA-2023:7522 Released 2023-11-28 · Red Hat rating Important
    OpenShift Virtualization 4.13.6 security and bug fix update
    • CNV 4.13 for RHEL 9 container-native-virtualization/bridge-marker-rhel9, container-native-virtualization/cluster-network-addons-operator-rhel9, container-native-virtualization/hyperconverged-cluster-operator-rhel9 +9
  • RHSA-2023:7521 Released 2023-11-28 · Red Hat rating Important
    OpenShift Virtualization 4.13.6 RPMs security and bug fix update
    • CNV 4.13 for RHEL 7 kubevirt-4.13.6-1596.el7, kubevirt-virtctl-4.13.6-1596.el7, kubevirt-virtctl-redistributable-4.13.6-1596.el7
    • CNV 4.13 for RHEL 8 kubevirt-4.13.6-1596.el8, kubevirt-virtctl-4.13.6-1596.el8, kubevirt-virtctl-redistributable-4.13.6-1596.el8
    • CNV 4.13 for RHEL 9 kubevirt-4.13.6-1596.el9, kubevirt-virtctl-4.13.6-1596.el9, kubevirt-virtctl-redistributable-4.13.6-1596.el9
  • RHSA-2023:7515 Released 2023-11-27 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 9.0.0 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator, openshift4/windows-machine-config-operator-bundle
  • RHSA-2023:6894 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.12.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-capi-operator-container-rhel8, openshift4/ose-cluster-capi-rhel8-operator, openshift4/ose-cluster-config-operator +9
  • RHSA-2023:6893 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.12.44 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-kube-descheduler-operator, openshift4/ose-cluster-kube-descheduler-rhel8-operator, openshift4/ose-descheduler
  • RHSA-2023:7325 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.13.23 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.13 openstack-ironic-1:21.3.1-0.20231106145533.e53dc4f.el9, openstack-ironic-api-1:21.3.1-0.20231106145533.e53dc4f.el9, openstack-ironic-common-1:21.3.1-0.20231106145533.e53dc4f.el9 +3
    • Red Hat OpenShift Container Platform 4.13 bpftool-7.0.0-284.41.1.el9_2, cri-o-1.26.4-5.1.rhaos4.13.git969e013.el8, cri-o-1.26.4-5.1.rhaos4.13.git969e013.el9 +47
  • RHSA-2023:7322 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.13.23 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/kubernetes-nmstate-rhel8-operator, openshift4/ose-cluster-capacity, openshift4/ose-descheduler +2
  • RHSA-2023:7323 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.13.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-baremetal-runtimecfg-rhel8, openshift4/ose-cluster-capi-operator-container-rhel8, openshift4/ose-cluster-capi-rhel8-operator +15
  • RHSA-2023:7315 Released 2023-11-21 · Red Hat rating Important
    OpenShift Container Platform 4.14.3 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-container-networking-plugins-rhel8, openshift4/ose-gcp-cluster-api-controllers-rhel8, openshift4/ose-k8s-prometheus-adapter +4
  • RHSA-2023:7345 Released 2023-11-20 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.9.3 security update
    • Red Hat OpenShift GitOps 1.9 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/dex-rhel8 +3
  • RHSA-2023:7344 Released 2023-11-20 · Red Hat rating Important
    openshift-gitops-kam security update
    • Red Hat OpenShift GitOps 1.9 openshift-gitops-kam-1.9.3-32.el8, openshift-gitops-kam-redistributable-1.9.3-32.el8
  • RHSA-2023:7342 Released 2023-11-16 · Red Hat rating Important
    OpenShift Container Platform 4.11 low-latency extras update
    • Red Hat OpenShift Container Platform 4.11 openshift4/noderesourcetopology-scheduler-container-rhel8, openshift4/numaresources-operator-bundle, openshift4/numaresources-rhel8-operator
  • RHSA-2023:6842 Released 2023-11-16 · Red Hat rating Important
    OpenShift Container Platform 4.12.43 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/oc-mirror-plugin-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-azure-disk-csi-driver-rhel8-operator +9
  • RHSA-2023:6841 Released 2023-11-16 · Red Hat rating Important
    Red Hat OpenShift Enterprise security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-clusterresourceoverride-rhel8, openshift4/ose-clusterresourceoverride-rhel8-operator
  • RHSA-2023:7288 Released 2023-11-16 · Red Hat rating Important
    Red Hat Product OCP Tools 4.14 Openshift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.14 jenkins-2-plugins-4.14.1699356715-1.el8, jenkins-2.414.3.1699356615-3.el8
  • RHSA-2023:6839 Released 2023-11-16 · Red Hat rating Important
    OpenShift Container Platform 4.14.2 security update
    • Red Hat OpenShift Container Platform 4.14 microshift-4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9, microshift-greenboot-4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9, microshift-networking-4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9 +2
  • RHSA-2023:6840 Released 2023-11-15 · Red Hat rating Important
    OpenShift Container Platform 4.14.2 packages and security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.1-13.1.rhaos4.14.git956c5f7.el8, cri-o-1.27.1-13.1.rhaos4.14.git956c5f7.el9, openshift-clients-4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el8 +3
  • RHSA-2023:6837 Released 2023-11-15 · Red Hat rating Important
    OpenShift Container Platform 4.14.2 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/oc-mirror-plugin-rhel8, openshift4/openshift-route-controller-manager-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8 +44
  • RHSA-2023:6269 Released 2023-11-15 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.12.1
    • Cert Manager support for Red Hat OpenShift release cert-manager/cert-manager-operator-rhel9, cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2023:6846 Released 2023-11-15 · Red Hat rating Important
    OpenShift Container Platform 4.13.22 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/oc-mirror-plugin-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-azure-cluster-api-controllers-rhel8 +16
  • RHSA-2023:6279 Released 2023-11-15 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.11.5
    • Cert Manager support for Red Hat OpenShift release cert-manager/cert-manager-operator-rhel9, cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2023:6836 Released 2023-11-15 · Red Hat rating Important
    OpenShift Container Platform 4.14.2 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift-tech-preview/metallb-rhel8, openshift4/kubernetes-nmstate-rhel9-operator, openshift4/metallb-rhel8 +8
  • RHSA-2023:6845 Released 2023-11-15 · Red Hat rating Important
    OpenShift Container Platform 4.13.22 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-vertical-pod-autoscaler-rhel8, openshift4/ose-vertical-pod-autoscaler-rhel8-operator
  • RHSA-2023:7215 Released 2023-11-15 · Red Hat rating Important
    Red Hat OpenShift Service Mesh Containers for 2.2.12
    • RHOSSM 2.2 for RHEL 8 openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/prometheus-rhel8, openshift-service-mesh/proxyv2-rhel8
  • RHSA-2023:6832 Released 2023-11-08 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update
    • RHODF 4.14 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-cli-rhel9, odf4/mcg-core-rhel9 +12
  • RHSA-2023:6828 Released 2023-11-08 · Red Hat rating Important
    ACS 4.1 enhancement update
    • RHACS 4.1 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +8
  • RHSA-2023:6818 Released 2023-11-08 · Red Hat rating Important
    Satellite 6.14 security and bug fix update
    • Red Hat Satellite 6.14 for RHEL 8 foreman-3.7.0.9-1.el8sat, foreman-cli-3.7.0.9-1.el8sat, foreman-debug-3.7.0.9-1.el8sat +33
  • RHSA-2023:6817 Released 2023-11-08 · Red Hat rating Important
    OpenShift Virtualization 4.14.0 Images security and bug fix update
    • CNV 4.14 for RHEL 9 container-native-virtualization/bridge-marker-rhel9, container-native-virtualization/cluster-network-addons-operator-rhel9, container-native-virtualization/cnv-containernetworking-plugins-rhel9 +37
  • RHSA-2023:6272 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.11.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47
  • RHSA-2023:6276 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-azure-disk-csi-driver-rhel8, openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator, openshift4/ose-cluster-kube-controller-manager-operator +25
  • RHSA-2023:6275 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.42 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift-tech-preview/metallb-rhel8, openshift4/metallb-rhel8, openshift4/metallb-rhel8-operator +4
  • RHSA-2023:6271 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.11.53 security and extras update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-aws-efs-csi-driver-container-rhel8, openshift4/ose-aws-efs-csi-driver-rhel8-operator, openshift4/ose-grafana +1
  • RHSA-2023:6257 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.13.21 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-ingress-operator, openshift4/ose-cluster-kube-controller-manager-operator, openshift4/ose-cluster-monitoring-operator +7
  • RHSA-2023:6256 Released 2023-11-08 · Red Hat rating Important
    OpenShift Container Platform 4.13.21 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift-tech-preview/metallb-rhel8, openshift4/metallb-rhel8, openshift4/metallb-rhel8-operator +1
  • RHSA-2023:6788 Released 2023-11-08 · Red Hat rating Important
    Red Hat OpenShift GitOps security update
    • Red Hat OpenShift GitOps 1.8 openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8, openshift-gitops-1/dex-rhel8 +4
  • RHSA-2023:6787 Released 2023-11-08 · Red Hat rating Important
    Network Observability security update
    • NETOBSERV 1.4 for RHEL 9 network-observability/network-observability-operator-bundle
  • RHSA-2023:6786 Released 2023-11-08 · Red Hat rating Important
    Fence Agents Remediation Operator 0.2.1 security update
    • Fence Agents Remediation 0.2 for RHEL 8 workload-availability/fence-agents-remediation-rhel8-operator
  • RHSA-2023:6785 Released 2023-11-08 · Red Hat rating Important
    Machine Deletion Remediation Operator 0.2.1 security update
    • Machine Deletion Remediation 0.2 for RHEL 8 workload-availability/machine-deletion-remediation-rhel8-operator
  • RHSA-2023:6784 Released 2023-11-08 · Red Hat rating Important
    Node Health Check Operator 0.6.1 security update
    • Node Healthcheck Operator 0.6 for RHEL 8 workload-availability/node-healthcheck-rhel8-operator, workload-availability/node-remediation-console-rhel8
  • RHSA-2023:6783 Released 2023-11-08 · Red Hat rating Important
    Node Health Check Operator 0.4.1
    • Node Healthcheck Operator 0.4 for RHEL 8 workload-availability/node-healthcheck-operator-bundle, workload-availability/node-healthcheck-rhel8-operator, workload-availability/node-remediation-console-rhel8
  • RHSA-2023:6781 Released 2023-11-08 · Red Hat rating Important
    openshift-pipelines-client security update
    • OpenShift Pipelines version 1.11 for RHEL 8 openshift-pipelines-client-1.11.2-11148.el8, openshift-pipelines-client-redistributable-1.11.2-11148.el8
  • RHSA-2023:6782 Released 2023-11-08 · Red Hat rating Important
    openshift-gitops-kam security update
    • Red Hat OpenShift GitOps 1.8 openshift-gitops-kam-1.8.6-10.el8, openshift-gitops-kam-redistributable-1.8.6-10.el8
  • RHSA-2023:6779 Released 2023-11-08 · Red Hat rating Important
    Red Hat OpenShift Pipelines Operator security update
    • OpenShift Pipelines version 1.11 for RHEL 8 openshift-pipelines/pipelines-chains-controller-rhel8, openshift-pipelines/pipelines-cli-tkn-rhel8, openshift-pipelines/pipelines-controller-rhel8 +20
  • RHSA-2023:6305 Released 2023-11-06 · Red Hat rating Important
    Migration Toolkit for Applications security update
    • MTA 6.1 for RHEL 8 mta/mta-hub-rhel8, mta/mta-operator-bundle, mta/mta-pathfinder-rhel8 +3
  • RHSA-2023:6298 Released 2023-11-03 · Red Hat rating Important
    Release of OpenShift Serverless Client kn 1.30.2 security update
    • Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.9.2-4.el8
  • RHSA-2023:6296 Released 2023-11-02 · Red Hat rating Important
    Release of OpenShift Serverless 1.30.2
    • Red Hat OpenShift Serverless 1.30 openshift-serverless-1-tech-preview/eventing-istio-controller-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8 +37
  • RHSA-2023:6280 Released 2023-11-02 · Red Hat rating Important
    Migration Toolkit for Applications security and bug fix update
    • MTA 6.2 for RHEL 8 mta/mta-hub-rhel9, mta/mta-operator-bundle, mta/mta-rhel8-operator +1
  • RHSA-2023:6251 Released 2023-11-01 · Red Hat rating Important
    OpenShift Virtualization 4.11.7 Images security and bug fix update
    • CNV 4.11 for RHEL 8 container-native-virtualization/checkup-framework, container-native-virtualization/hostpath-csi-driver, container-native-virtualization/hostpath-csi-driver-rhel8 +11
  • RHSA-2023:6248 Released 2023-11-01 · Red Hat rating Important
    OpenShift Virtualization 4.12.8 Images security update
    • CNV 4.12 for RHEL 8 container-native-virtualization/bridge-marker, container-native-virtualization/cluster-network-addons-operator, container-native-virtualization/cnv-containernetworking-plugins +37
  • RHSA-2023:6243 Released 2023-11-01 · Red Hat rating Important
    openshift-gitops-kam security update
    • Red Hat OpenShift GitOps 1.10 openshift-gitops-kam-1.10.1-22.el8, openshift-gitops-kam-redistributable-1.10.1-22.el8
  • RHSA-2023:6240 Released 2023-11-01 · Red Hat rating Important
    OpenShift Container Platform 4.13 low-latency extras security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/numaresources-operator-bundle
  • RHSA-2023:6235 Released 2023-11-01 · Red Hat rating Important
    OpenShift Virtualization 4.13.5 Images security update
    • CNV 4.13 for RHEL 9 container-native-virtualization/bridge-marker-rhel9, container-native-virtualization/cluster-network-addons-operator-rhel9, container-native-virtualization/cnv-containernetworking-plugins-rhel9 +39
  • RHSA-2023:6233 Released 2023-11-01 · Red Hat rating Important
    Red Hat OpenShift Enterprise security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/numaresources-operator-bundle
  • RHSA-2023:6126 Released 2023-11-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.41 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-alibaba-cloud-csi-driver-container-rhel8, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8 +24
  • RHSA-2023:6125 Released 2023-11-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.41 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ingress-node-firewall, openshift4/ose-aws-efs-csi-driver-container-rhel8
  • RHSA-2023:6154 Released 2023-11-01 · Red Hat rating Important
    Secondary Scheduler Operator for Red Hat OpenShift 1.2.0
    • OSSO 1.2 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle, openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8
  • RHSA-2023:6220 Released 2023-10-31 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.10.1 security update
    • Red Hat OpenShift GitOps 1.10 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/gitops-rhel8 +1
  • RHSA-2023:6217 Released 2023-10-31 · Red Hat rating Important
    Red Hat OpenShift Enterprise security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/numaresources-operator-bundle
  • RHSA-2023:5009 Released 2023-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 security update
    • Ironic content for Red Hat OpenShift Container Platform 4.14 openstack-ironic-1:21.5.0-0.20231002130534.0df5961.el9, openstack-ironic-api-1:21.5.0-0.20231002130534.0df5961.el9, openstack-ironic-common-1:21.5.0-0.20231002130534.0df5961.el9 +47
    • Red Hat OpenShift Container Platform 4.14 afterburn-5.4.3-1.rhaos4.14.el9, afterburn-dracut-5.4.3-1.rhaos4.14.el9, bpftool-7.0.0-284.36.1.el9_2 +47
  • RHSA-2023:5007 Released 2023-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 security update
    • Red Hat OpenShift Container Platform 4.14 openshift-tech-preview/metallb-rhel8, openshift4/cloud-event-proxy-rhel8, openshift4/frr-rhel9 +47
  • RHSA-2023:5006 Released 2023-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2023:5005 Released 2023-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-operator-sdk-rhel8, openshift4/ose-secrets-store-csi-mustgather-rhel8
  • RHSA-2023:6202 Released 2023-10-30 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.6.8 security and bug fix updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45
  • RHSA-2023:6200 Released 2023-10-30 · Red Hat rating Important
    Multicluster Engine for Kubernetes 2.1.9 security updates and bug fixes
    • multicluster engine for Kubernetes 2.1 for RHEL 8 multicluster-engine/agent-service-rhel8, multicluster-engine/apiserver-network-proxy-rhel8, multicluster-engine/assisted-image-service-rhel8 +37
  • RHSA-2023:6130 Released 2023-10-30 · Red Hat rating Important
    OpenShift Container Platform 4.13.19 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-alibaba-cloud-csi-driver-container-rhel8, openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8, openshift4/ose-aws-ebs-csi-driver-rhel8 +44
  • RHSA-2023:6179 Released 2023-10-30 · Red Hat rating Critical
    Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.13 jenkins-2-plugins-4.13.1698292274-1.el8, jenkins-2.414.3.1698292201-3.el8
  • RHSA-2023:6129 Released 2023-10-30 · Red Hat rating Important
    OpenShift Container Platform 4.13.19 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ingress-node-firewall, openshift4/ose-aws-efs-csi-driver-container-rhel8, openshift4/ose-aws-efs-csi-driver-rhel8-operator +5
  • RHSA-2023:6172 Released 2023-10-30 · Red Hat rating Critical
    Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.12 jenkins-2-plugins-4.12.1698294000-1.el8, jenkins-2.414.3.1698293911-3.el8
  • RHSA-2023:6171 Released 2023-10-30 · Red Hat rating Critical
    Red Hat Product OCP Tools 4.11 Openshift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.11 for RHEL 8 jenkins-2-plugins-4.11.1698299029-1.el8, jenkins-2.414.3.1698298955-3.el8
  • RHSA-2023:6165 Released 2023-10-30 · Red Hat rating Important
    skupper-cli and skupper-router security update
    • Red Hat Service Interconnect skupper-cli-1.4.3-4.el8, skupper-router-2.4.3-1.el8, skupper-router-common-2.4.3-1.el8 +2
    • Red Hat Service Interconnect 1 skupper-cli-1.4.3-4.el9, skupper-router-2.4.3-1.el9, skupper-router-common-2.4.3-1.el9 +2
  • RHSA-2023:6161 Released 2023-10-30 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.7.14 security and bug fix update
    • 8Base-RHMTC-1.7 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-velero-plugin-for-aws-rhel8, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8 +3
  • RHSA-2023:6144 Released 2023-10-30 · Red Hat rating Important
    Custom Metric Autoscaler operator for Red Hat OpenShift security update
    • OpenShift Custom Metrics Autoscaler 2 custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle +2
  • RHSA-2023:6156 Released 2023-10-30 · Red Hat rating Important
    Red Hat OpenShift support for Windows Containers 8.1.0 security update
    • Red Hat OpenShift Container Platform 4.13 openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2023:6143 Released 2023-10-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.0 CNF vRAN extras security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/bare-metal-event-relay-rhel8-operator, openshift4/topology-aware-lifecycle-manager-rhel8-operator
  • RHSA-2023:5933 Released 2023-10-26 · Red Hat rating Important
    Openshift Secondary Scheduler Operator 1.1.3 security update
    • OSSO 1.1 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8
  • RHSA-2023:5947 Released 2023-10-26 · Red Hat rating Important
    Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update
    • RODOO 1.0 for RHEL 8 run-once-duration-override-operator/run-once-duration-override-rhel8
  • RHSA-2023:6121 Released 2023-10-25 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8
  • RHSA-2023:6118 Released 2023-10-25 · Red Hat rating Important
    OpenShift API for Data Protection security update
    • 8Base-OADP-1.2 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-rhel8-operator, oadp/oadp-velero-plugin-for-aws-rhel8 +6
  • RHSA-2023:6116 Released 2023-10-25 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.0.14 security and bug fix update
    • 8Base-OADP-1.0 oadp/oadp-rhel8-operator
  • RHSA-2023:6115 Released 2023-10-25 · Red Hat rating Important
    OpenShift API for Data Protection security update
    • 8Base-OADP-1.1 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-rhel8-operator, oadp/oadp-velero-plugin-for-aws-rhel8 +6
  • RHSA-2023:5895 Released 2023-10-25 · Red Hat rating Important
    OpenShift Container Platform 4.12.40 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-operator-sdk-rhel8
  • RHSA-2023:6085 Released 2023-10-24 · Red Hat rating Important
    Red Hat OpenShift distributed tracing security update
    • Red Hat OpenShift distributed tracing 2.9 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +15
  • RHSA-2023:6084 Released 2023-10-24 · Red Hat rating Important
    RHACS 3.74 enhancement and security update
    • RHACS 3.74 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2023:6077 Released 2023-10-24 · Red Hat rating Moderate
    toolbox security update
    • Red Hat Enterprise Linux AppStream (v. 9) toolbox-0.0.99.3-10.el9_2, toolbox-tests-0.0.99.3-10.el9_2
  • RHSA-2023:5542 Released 2023-10-24 · Red Hat rating Important
    Logging Subsystem 5.5.17 - Red Hat OpenShift security update
    • RHOL 5.5 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator +7
  • RHSA-2023:6071 Released 2023-10-24 · Red Hat rating Important
    RHACS 4.0 enhancement and security update
    • RHACS 4.0 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2023:6061 Released 2023-10-23 · Red Hat rating Important
    Red Hat OpenShift Pipelines 1.12.1 release and security update
    • OpenShift Pipelines version 1.12 for RHEL 8 openshift-pipelines/pipelines-chains-controller-rhel8, openshift-pipelines/pipelines-cli-tkn-rhel8, openshift-pipelines/pipelines-controller-rhel8 +22
  • RHSA-2023:6059 Released 2023-10-23 · Red Hat rating Important
    Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update
    • OpenShift Pipelines version 1.12 for RHEL 8 openshift-pipelines-client-1.12.1-11260.el8, openshift-pipelines-client-redistributable-1.12.1-11260.el8
  • RHSA-2023:6057 Released 2023-10-23 · Red Hat rating Critical
    toolbox security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) toolbox-0.0.99.3-4.el9_0, toolbox-tests-0.0.99.3-4.el9_0
  • RHSA-2023:6048 Released 2023-10-23 · Red Hat rating Important
    ACS 4.2 enhancement and security update
    • RHACS 4.2 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2023:6042 Released 2023-10-23 · Red Hat rating Important
    Self Node Remediation Operator 0.5.1 security update
    • Self Node Remediation 0.5 for RHEL 8 workload-availability/self-node-remediation-rhel8-operator
  • RHSA-2023:6041 Released 2023-10-23 · Red Hat rating Important
    Self Node Remediation Operator 0.7.1 security update
    • Self Node Remediation 0.7 for RHEL 8 workload-availability/self-node-remediation-rhel8-operator
  • RHSA-2023:6040 Released 2023-10-23 · Red Hat rating Important
    Node Maintenance Operator 5.2.1 security update
    • Node Maintenance Operator 5.2 for RHEL 8 workload-availability/node-maintenance-rhel8-operator
  • RHSA-2023:6039 Released 2023-10-23 · Red Hat rating Important
    Node Maintenance Operator 5.0.1 security update
    • Node Maintenance Operator 5.0 for RHEL 8 workload-availability/node-maintenance-rhel8-operator
  • RHSA-2023:6031 Released 2023-10-23 · Red Hat rating Important
    Cryostat security update
    • Cryostat 2 on RHEL 8 cryostat-tech-preview/cryostat-grafana-dashboard-rhel8, cryostat-tech-preview/cryostat-operator-bundle, cryostat-tech-preview/cryostat-reports-rhel8 +3
  • RHSA-2023:5982 Released 2023-10-20 · Red Hat rating Important
    Red Hat Satellite Client security and bug fix update
    • Satellite Client 6 for RHEL 6 puppet-agent-7.26.0-3.el6sat
    • Satellite Client 6 for RHEL 7 foreman_ygg_worker-0.2.2-1.el7sat, puppet-agent-7.26.0-3.el7sat, yggdrasil-0.2.3-1.el7sat
    • Satellite Client 6 for RHEL 8 foreman_ygg_worker-0.2.2-1.el8sat, puppet-agent-7.26.0-3.el8sat, yggdrasil-0.2.3-1.el8sat
    • Satellite Client 6 for RHEL 9 foreman_ygg_worker-0.2.2-1.el9sat, puppet-agent-7.26.0-3.el9sat, yggdrasil-0.2.3-1.el9sat
  • RHSA-2023:5980 Released 2023-10-20 · Red Hat rating Important
    Satellite 6.11.5.6 async security update
    • Red Hat Satellite 6.11 for RHEL 7 foreman-3.1.1.27-1.el7sat, foreman-cli-3.1.1.27-1.el7sat, foreman-debug-3.1.1.27-1.el7sat +14
    • Red Hat Satellite 6.11 for RHEL 8 foreman-3.1.1.27-1.el8sat, foreman-cli-3.1.1.27-1.el8sat, foreman-debug-3.1.1.27-1.el8sat +14
  • RHSA-2023:5979 Released 2023-10-20 · Red Hat rating Important
    Satellite 6.12.5.2 Async Security Update
    • Red Hat Satellite 6.12 for RHEL 8 foreman-3.3.0.23-1.el8sat, puppet-agent-7.26.0-3.el8sat, rubygem-git-1.18.0-1.el8sat +2
  • RHSA-2023:5976 Released 2023-10-20 · Red Hat rating Important
    Service Telemetry Framework 1.5.2 security update
    • Service Telemetry Framework 1.5 for RHEL 8 stf/prometheus-webhook-snmp-rhel8, stf/service-telemetry-operator-bundle, stf/service-telemetry-rhel8-operator +4
  • RHSA-2023:5974 Released 2023-10-20 · Red Hat rating Important
    Network Observability security update
    • NETOBSERV 1.4 for RHEL 9 network-observability/network-observability-console-plugin-rhel9, network-observability/network-observability-ebpf-agent-rhel9, network-observability/network-observability-flowlogs-pipeline-rhel9 +1
  • RHSA-2023:5971 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1.1 (director-operator) security update
    • Red Hat OpenStack Platform 17.1 rhosp-rhel9/osp-director-agent, rhosp-rhel9/osp-director-downloader, rhosp-rhel9/osp-director-operator +1
  • RHSA-2023:5964 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update
    • Red Hat OpenStack Platform 16.2 collectd-libpod-stats-1.0.4-5.el8ost
  • RHSA-2023:5965 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update
    • Red Hat OpenStack Platform 16.2 etcd-3.3.23-15.el8ost, python-octavia-tests-tempest-1.4.1-2.20230111145026.f7718ef.el8ost, python3-octavia-tests-tempest-1.4.1-2.20230111145026.f7718ef.el8ost +1
  • RHSA-2023:5967 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update
    • Red Hat OpenStack Platform 16.1 collectd-libpod-stats-1.0.4-5.el8ost, etcd-3.3.23-15.el8ost, python-octavia-tests-tempest-1.3.0-1.20210528004838.0ae7f10.el8ost +2
  • RHSA-2023:5970 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.5-6.el8ost
  • RHSA-2023:5969 Released 2023-10-20 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1.1 security update
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.5-6.el9ost, etcd-3.4.26-3.el9ost, python-octavia-tests-tempest-1.9.0-1.20230509101018.el9ost +2
  • RHSA-2023:5530 Released 2023-10-20 · Red Hat rating Important
    Logging Subsystem 5.7.7 - Red Hat OpenShift security update
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator +7
  • RHSA-2023:5541 Released 2023-10-20 · Red Hat rating Important
    Logging Subsystem 5.6.12 - Red Hat OpenShift security update
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-proxy-rhel8, openshift-logging/elasticsearch-rhel8-operator +7
  • RHSA-2023:5952 Released 2023-10-19 · Red Hat rating Important
    Red Hat OpenShift Service Mesh for 2.4.4 security update
    • RHOSSM 2.4 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +6
  • RHSA-2023:5951 Released 2023-10-19 · Red Hat rating Important
    Red Hat OpenShift Service Mesh for 2.3.8 security update
    • RHOSSM 2.3 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +5
  • RHSA-2023:5950 Released 2023-10-19 · Red Hat rating Important
    Red Hat OpenShift Service Mesh for 2.2.11 security update
    • RHOSSM 2.2 for RHEL 8 openshift-service-mesh/grafana-rhel8, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/istio-must-gather-rhel8 +5
  • RHSA-2023:5935 Released 2023-10-19 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2.5 security update
    • Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1
  • RHSA-2023:5931 Released 2023-10-19 · Red Hat rating Important
    Satellite 6.13.5 Async Security Update
    • Red Hat Satellite 6.13 for RHEL 8 foreman-3.5.1.23-1.el8sat, foreman-cli-3.5.1.23-1.el8sat, foreman-debug-3.5.1.23-1.el8sat +17
  • RHSA-2023:5863 Released 2023-10-18 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-7.5.15-5.el8_8
  • RHSA-2023:5867 Released 2023-10-18 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-9.0.9-4.el9_2
  • RHSA-2023:5864 Released 2023-10-18 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) grafana-7.5.11-4.el8_6
  • RHSA-2023:5865 Released 2023-10-18 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-6.el8_4
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) grafana-7.3.6-6.el8_4
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) grafana-7.3.6-6.el8_4
  • RHSA-2023:5866 Released 2023-10-18 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) grafana-7.5.11-6.el9_0
  • RHSA-2023:5851 Released 2023-10-18 · Red Hat rating Important
    RHACS 4.1 enhancement and security update
    • RHACS 4.1 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +8
  • RHSA-2023:5717 Released 2023-10-18 · Red Hat rating Important
    OpenShift Container Platform 4.11.52 packages and security update
    • Red Hat OpenShift Container Platform 4.11 openshift-4.11.0-202310140343.p0.gec2a592.assembly.stream.el8, openshift-hyperkube-4.11.0-202310140343.p0.gec2a592.assembly.stream.el8
  • RHSA-2023:5697 Released 2023-10-18 · Red Hat rating Important
    OpenShift Container Platform 4.11.52 bug fix and security update
    • Red Hat OpenShift Container Platform 4.11 openshift4/ose-docker-registry, openshift4/ose-hyperkube, openshift4/ose-pod
  • RHSA-2023:5835 Released 2023-10-18 · Red Hat rating Important
    rhc-worker-script enhancement and security update
    • Red Hat Enterprise Linux Client (v. 7) rhc-worker-script-0.5-1.el7_9
    • Red Hat Enterprise Linux Server (v. 7) rhc-worker-script-0.5-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) rhc-worker-script-0.5-1.el7_9
  • RHSA-2023:5679 Released 2023-10-18 · Red Hat rating Important
    OpenShift Container Platform 4.12.39 packages and security update
    • Red Hat OpenShift Container Platform 4.12 openshift-4.12.0-202310132326.p0.g20cda61.assembly.stream.el8, openshift-4.12.0-202310132326.p0.g20cda61.assembly.stream.el9, openshift-hyperkube-4.12.0-202310132326.p0.g20cda61.assembly.stream.el8 +1
  • RHSA-2023:5677 Released 2023-10-18 · Red Hat rating Important
    OpenShift Container Platform 4.12.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-hyperkube, openshift4/ose-pod
  • RHSA-2023:5810 Released 2023-10-17 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.3 for RHEL 8 receptor-1.4.2-1.el8ap, receptorctl-1.4.2-1.el8ap
    • Red Hat Ansible Automation Platform 2.3 for RHEL 9 receptor-1.4.2-1.el9ap, receptorctl-1.4.2-1.el9ap
  • RHSA-2023:5809 Released 2023-10-17 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.2.2 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.2 for RHEL 8 receptor-1.4.2-1.el8ap, receptorctl-1.4.2-1.el8ap
    • Red Hat Ansible Automation Platform 2.2 for RHEL 9 receptor-1.4.2-1.el9ap, receptorctl-1.4.2-1.el9ap
  • RHSA-2023:5675 Released 2023-10-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.17 packages and security update
    • Red Hat OpenShift Container Platform 4.13 bpftool-7.0.0-284.36.1.el9_2, containers-common-3:1-36.rhaos4.13.el8, containers-common-3:1-36.rhaos4.13.el9 +47
  • RHSA-2023:5672 Released 2023-10-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.17 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-machine-approver, openshift4/ose-hyperkube, openshift4/ose-ovn-kubernetes +2
  • RHSA-2023:5805 Released 2023-10-17 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.4 for RHEL 8 receptor-1.4.2-1.el8ap, receptorctl-1.4.2-1.el8ap
    • Red Hat Ansible Automation Platform 2.4 for RHEL 9 receptor-1.4.2-1.el9ap, receptorctl-1.4.2-1.el9ap
  • RHSA-2023:5738 Released 2023-10-16 · Red Hat rating Important
    go-toolset and golang security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) golang-1.19.13-1.el9_2, golang-bin-1.19.13-1.el9_2, golang-docs-1.19.13-1.el9_2 +4
  • RHSA-2023:5721 Released 2023-10-16 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-1.module+el8.8.0+20380+7171fefb.aarch64::go-toolset:rhel8 +18
  • RHSA-2023:5719 Released 2023-10-16 · Red Hat rating Important
    go-toolset-1.19 and go-toolset-1.19-golang security update
    • Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.19-1.19.13-1.el7_9, go-toolset-1.19-build-1.19.13-1.el7_9, go-toolset-1.19-golang-1.19.13-2.el7_9 +8
    • Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.19-1.19.13-1.el7_9, go-toolset-1.19-build-1.19.13-1.el7_9, go-toolset-1.19-golang-1.19.13-2.el7_9 +8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Builds for Red Hat OpenShiftAffectedNo fix yet
Cost Management Metrics OperatorAffectedNo fix yet
Migration Toolkit for Applications 7AffectedNo fix planned: Out of support scope
Migration Toolkit for RuntimesAffectedNo fix planned: Out of support scope
NBDE Tang ServerAffectedNo fix planned: Will not fix
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 3AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 5AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform Assisted Installer 1AffectedNo fix planned: Out of support scope
Red Hat OpenShift Data Science (RHODS)AffectedNo fix planned: Out of support scope
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 2AffectedNo fix planned: Out of support scope
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.1AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 17.0AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Red Hat Web TerminalAffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix yet
8Base-MTV-2.4Fixed—
8Base-MTV-2.5Fixed—
8Base-OADP-1.0Fixed RHSA-2023:6116
8Base-OADP-1.1Fixed RHSA-2023:6115
8Base-OADP-1.2Fixed RHSA-2023:6118
8Base-RHMTC-1.7Fixed RHSA-2023:6161
8Base-RHMTC-1.8Fixed RHSA-2023:6121
9Base-OADP-1.3Fixed RHSA-2023:7555
CNV 4.11 for RHEL 8Fixed RHSA-2023:6251
CNV 4.12 for RHEL 8Fixed RHSA-2023:6248, RHSA-2024:0273
CNV 4.13 for RHEL 7Fixed RHSA-2023:7521
CNV 4.13 for RHEL 8Fixed RHSA-2023:7521
CNV 4.13 for RHEL 9Fixed RHSA-2023:6235, RHSA-2023:7521, RHSA-2023:7522
CNV 4.14 for RHEL 9Fixed RHSA-2023:6817, RHSA-2023:7704
Cert Manager support for Red Hat OpenShift releaseFixed RHSA-2023:6269, RHSA-2023:6279
Cryostat 2 on RHEL 8Fixed RHSA-2023:6031
Fence Agents Remediation 0.2 for RHEL 8Fixed RHSA-2023:6786
Ironic content for Red Hat OpenShift Container Platform 4.12Fixed RHSA-2023:7610
Ironic content for Red Hat OpenShift Container Platform 4.13Fixed RHSA-2023:7325
KDO 5.0 for RHEL 9Fixed RHSA-2024:0302
LVMS 4.12 for RHEL 8Fixed—
LVMS 4.13 for RHEL 8Fixed—
LVMS 4.14 for RHEL 9Fixed—
MTA 6.1 for RHEL 8Fixed RHSA-2023:6305
MTA 6.2 for RHEL 8Fixed RHSA-2023:6280
MTA 7.0 for RHEL 9Fixed—
Machine Deletion Remediation 0.2 for RHEL 8Fixed RHSA-2023:6785
NETOBSERV 1.4 for RHEL 9Fixed RHSA-2023:5974, RHSA-2023:6787
Node Healthcheck Operator 0.4 for RHEL 8Fixed RHSA-2023:6783
Node Healthcheck Operator 0.6 for RHEL 8Fixed RHSA-2023:6784
Node Maintenance Operator 5.0 for RHEL 8Fixed RHSA-2023:6039
Node Maintenance Operator 5.2 for RHEL 8Fixed RHSA-2023:6040
OSSO 1.1 for RHEL 8Fixed RHSA-2023:5933
OSSO 1.2 for RHEL 8Fixed RHSA-2023:6154
OpenShift Custom Metrics Autoscaler 2Fixed RHSA-2023:6144
OpenShift Developer Tools and Services for OCP 4.11 for RHEL 8Fixed RHSA-2023:6171
OpenShift Developer Tools and Services for OCP 4.12Fixed RHSA-2023:6172
OpenShift Developer Tools and Services for OCP 4.13Fixed RHSA-2023:6179
OpenShift Developer Tools and Services for OCP 4.14Fixed RHSA-2023:7288, RHSA-2024:0777
OpenShift Developer Tools and Services for OCP 4.15Fixed—
OpenShift Pipelines version 1.10 for RHEL 8Fixed RHSA-2023:7699, RHSA-2023:7703
OpenShift Pipelines version 1.11 for RHEL 8Fixed RHSA-2023:6779, RHSA-2023:6781
OpenShift Pipelines version 1.12 for RHEL 8Fixed RHSA-2023:6059, RHSA-2023:6061
Quay v3Fixed—
RHACS 3.74 for RHEL 8Fixed RHSA-2023:6084
RHACS 4.0 for RHEL 8Fixed RHSA-2023:6071
RHACS 4.1 for RHEL 8Fixed RHSA-2023:5851, RHSA-2023:6828
RHACS 4.2 for RHEL 8Fixed RHSA-2023:6048
RHACS 4.3 for RHEL 8Fixed—
RHDH 1.1 for RHEL 9Fixed—
RHODF 4.14 for RHEL 9Fixed RHSA-2023:6832
RHODF 4.16 for RHEL 9Fixed RHSA-2024:6755
RHOL 5.5 for RHEL 8Fixed RHSA-2023:5542
RHOL 5.6 for RHEL 8Fixed RHSA-2023:5541
RHOL 5.7 for RHEL 8Fixed RHSA-2023:5530
RHOSSM 2.2 for RHEL 8Fixed RHSA-2023:5950, RHSA-2023:7215
RHOSSM 2.3 for RHEL 8Fixed RHSA-2023:5951
RHOSSM 2.4 for RHEL 8Fixed RHSA-2023:5952
RODOO 1.0 for RHEL 8Fixed RHSA-2023:5947
RODOO 1.1 for RHEL 9Fixed RHSA-2024:0269
Red Hat 3Scale 2.13Fixed—
Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8Fixed RHSA-2023:6202
Red Hat Ansible Automation Platform 2.2 for RHEL 8Fixed RHSA-2023:5809
Red Hat Ansible Automation Platform 2.2 for RHEL 9Fixed RHSA-2023:5809
Red Hat Ansible Automation Platform 2.3 for RHEL 8Fixed RHSA-2023:5810
Red Hat Ansible Automation Platform 2.3 for RHEL 9Fixed RHSA-2023:5810
Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed RHSA-2023:5805
Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed RHSA-2023:5805
Red Hat Assisted Installer 2.0Fixed—
Red Hat Ceph Storage 5.3 MONFixed RHSA-2024:4118
Red Hat Ceph Storage 5.3 OSDFixed RHSA-2024:4118
Red Hat Ceph Storage 5.3 ToolsFixed RHSA-2024:4118
Red Hat Ceph Storage 6.1 ToolsFixed RHSA-2023:7741, RHSA-2025:4240
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2024:3927
Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2023:5719
Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2023:5719
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:5721, RHSA-2023:5863
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:5738, RHSA-2023:5867, RHSA-2023:6077
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:5865
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:5865
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:8322
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:5864
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:5866, RHSA-2023:6057
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:5865
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2023:5835
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2023:5835
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2023:5835
Red Hat OpenShift Compliance Operator v1 on RHEL-8Fixed—
Red Hat OpenShift Container Platform 4.11Fixed RHSA-2023:5697, RHSA-2023:5717, RHSA-2023:6271, RHSA-2023:6272, RHSA-2023:7342, RHSA-2023:7478, RHSA-2023:7479, RHSA-2023:7481, RHSA-2023:7662, RHSA-2023:7690, RHSA-2023:7691, RHSA-2024:0059, RHSA-2024:0306, RHSA-2024:0682, RHSA-2024:1464
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2023:5677, RHSA-2023:5679, RHSA-2023:5895, RHSA-2023:6125, RHSA-2023:6126, RHSA-2023:6233, RHSA-2023:6275, RHSA-2023:6276, RHSA-2023:6841, RHSA-2023:6842, RHSA-2023:6893, RHSA-2023:6894, RHSA-2023:7607, RHSA-2023:7608, RHSA-2023:7610, RHSA-2023:7710, RHSA-2023:7823, RHSA-2024:0198, RHSA-2024:0485, RHSA-2024:0664, RHSA-2024:0833, RHSA-2024:1052, RHSA-2024:1572, RHSA-2025:0014, RHSA-2025:0832
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2023:5672, RHSA-2023:5675, RHSA-2023:6129, RHSA-2023:6130, RHSA-2023:6156, RHSA-2023:6240, RHSA-2023:6256, RHSA-2023:6257, RHSA-2023:6845, RHSA-2023:6846, RHSA-2023:7322, RHSA-2023:7323, RHSA-2023:7325, RHSA-2023:7474, RHSA-2023:7475, RHSA-2023:7602, RHSA-2023:7604, RHSA-2023:7687, RHSA-2023:7827, RHSA-2024:0193, RHSA-2024:0484, RHSA-2024:0660, RHSA-2024:0741, RHSA-2024:0946, RHSA-2024:1037, RHSA-2024:10813, RHSA-2024:1454, RHSA-2025:1116
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2023:5005, RHSA-2023:5006, RHSA-2023:5007, RHSA-2023:5009, RHSA-2023:6143, RHSA-2023:6217, RHSA-2023:6836, RHSA-2023:6837, RHSA-2023:6839, RHSA-2023:6840, RHSA-2023:7315, RHSA-2023:7469, RHSA-2023:7470, RHSA-2023:7515, RHSA-2023:7599, RHSA-2023:7682, RHSA-2023:7831, RHSA-2024:0050, RHSA-2024:0290, RHSA-2024:0642, RHSA-2024:0837, RHSA-2024:0941, RHSA-2024:10523, RHSA-2024:1458, RHSA-2024:1765
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2023:7198, RHSA-2023:7200, RHSA-2023:7201, RHSA-2024:0766, RHSA-2024:0954, RHSA-2024:10142, RHSA-2024:1210, RHSA-2024:1449, RHSA-2024:1770
Red Hat OpenShift Dev Spaces 3Fixed RHSA-2024:4631
Red Hat OpenShift File Integrity Operator v1 on RHEL-8Fixed—
Red Hat OpenShift GitOps 1.10Fixed RHSA-2023:6220, RHSA-2023:6243
Red Hat OpenShift GitOps 1.8Fixed RHSA-2023:6782, RHSA-2023:6788
Red Hat OpenShift GitOps 1.9Fixed RHSA-2023:7344, RHSA-2023:7345
Red Hat OpenShift Serverless 1.0Fixed RHSA-2023:6298
Red Hat OpenShift Serverless 1.30Fixed RHSA-2023:6296
Red Hat OpenStack Platform 16.1Fixed RHSA-2023:5967
Red Hat OpenStack Platform 16.2Fixed RHSA-2023:5935, RHSA-2023:5964, RHSA-2023:5965
Red Hat OpenStack Platform 17.1Fixed RHSA-2023:5969, RHSA-2023:5970, RHSA-2023:5971
Red Hat Satellite 6.11 for RHEL 7Fixed RHSA-2023:5980
Red Hat Satellite 6.11 for RHEL 8Fixed RHSA-2023:5980
Red Hat Satellite 6.12 for RHEL 8Fixed RHSA-2023:5979
Red Hat Satellite 6.13 for RHEL 8Fixed RHSA-2023:5931
Red Hat Satellite 6.14 for RHEL 8Fixed RHSA-2023:6818
Red Hat Service InterconnectFixed RHSA-2023:6165
Red Hat Service Interconnect 1Fixed RHSA-2023:6165
Satellite Client 6 for RHEL 7Fixed RHSA-2023:5982
Satellite Client 6 for RHEL 8Fixed RHSA-2023:5982
Satellite Client 6 for RHEL 9Fixed RHSA-2023:5982
Self Node Remediation 0.5 for RHEL 8Fixed RHSA-2023:6042
Self Node Remediation 0.7 for RHEL 8Fixed RHSA-2023:6041
Service Telemetry Framework 1.5 for RHEL 8Fixed RHSA-2023:5976
Not affected: 79 products
  • 8Base-MTV-2.4
  • 8Base-MTV-2.5
  • 8Base-OADP-1.0
  • 8Base-OADP-1.1
  • 8Base-OADP-1.2
  • 8Base-RHMTC-1.7
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.3
  • CNV 4.11 for RHEL 8
  • CNV 4.12 for RHEL 8
  • CNV 4.13 for RHEL 9
  • CNV 4.14 for RHEL 9
  • Cert Manager support for Red Hat OpenShift release
  • Cryostat 2 on RHEL 8
  • Fence Agents Remediation 0.2 for RHEL 8
  • Ironic content for Red Hat OpenShift Container Platform 4.14
  • Ironic content for Red Hat OpenShift Container Platform 4.15
  • LVMS 4.14 for RHEL 9
  • MTA 6.2 for RHEL 8
  • MTA 7.0 for RHEL 8
  • MTA 7.0 for RHEL 9
  • Machine Deletion Remediation 0.2 for RHEL 8
  • NETOBSERV 1.4 for RHEL 9
  • Node Healthcheck Operator 0.6 for RHEL 8
  • Node Maintenance Operator 5.0 for RHEL 8
  • Node Maintenance Operator 5.2 for RHEL 8
  • OSSO 1.1 for RHEL 8
  • OpenShift Developer Tools and Services for OCP 4.13
  • OpenShift Developer Tools and Services for OCP 4.14
  • RHACS 3.74 for RHEL 8
  • RHACS 4.0 for RHEL 8
  • RHACS 4.2 for RHEL 8
  • RHDH 1.1 for RHEL 9
  • RHODF 4.14 for RHEL 9
  • RHODF 4.16 for RHEL 9
  • RHOL 5.5 for RHEL 8
  • RHOL 5.6 for RHEL 8
  • RHOL 5.7 for RHEL 8
  • RHOSSM 2.2 for RHEL 8
  • RODOO 1.0 for RHEL 8
  • Red Hat 3Scale 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Ansible Automation Platform 1.2
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • Red Hat Assisted Installer 2.0
  • Red Hat Ceph Storage 5.3 Tools
  • Red Hat Ceph Storage 6.1 Tools
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.11
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces 3
  • Red Hat OpenShift GitOps 1.10
  • Red Hat OpenShift GitOps 1.9
  • Red Hat OpenStack Platform 16.1
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat Openshift Data Foundation 4
  • Red Hat Satellite 6.11 for RHEL 7
  • Red Hat Satellite 6.11 for RHEL 8
  • Red Hat Satellite 6.12 for RHEL 8
  • Red Hat Satellite 6.13 for RHEL 8
  • Red Hat Satellite 6.14 for RHEL 8
  • Red Hat Software Collections
  • Satellite Client 6 for RHEL 6
  • Satellite Client 6 for RHEL 7
  • Satellite Client 6 for RHEL 8
  • Satellite Client 6 for RHEL 9
  • Self Node Remediation 0.5 for RHEL 8
  • Self Node Remediation 0.7 for RHEL 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-39325
  2. 2026-10-03 Alias added: GHSA-4374-p667-p6c8
  3. 2026-10-16 Fix available: Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 · Red Hat
  4. 2026-10-30 Affected versions changed · Red Hat
  5. 2026-10-30 Fix available: Red Hat OpenShift File Integrity Operator v1 on RHEL-8 · Red Hat
  6. 2026-11-03 EPSS moved to the 90th–95th percentile

References

Advisory 33

Other 49

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences