RHSA-2024:1559HighCVSS 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.6 bug fix and security update

Published
April 2, 2024
Last Modified
August 13, 2026

🔗 CVE IDs covered (2)

CVE-2024-1725 →CVE-2024-24786 →

📋 Description

CVE-2024-1725 — kubevirt-csi: PersistentVolume allows access to HCP's root node CVE-2024-24786 — golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:639a38b8f70d9bc0b34078f2105d97b7cefd073f410d4ca6cd3f9d375fdf55eb_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:7724d0551d640acb28624f56181a11f44a14585bf59e58adfa7767fad1b5135b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:a6c45d6b3bd9b01e496ca66817c624a73a5581b12b3a3447fc131aa614069fd2_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:dfaa505d914141846eb6d276bdd4f3d7b7f3a14b0770a5a47d5f91dfe2a2d6d5_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:2f3bb5de4d795a0e0c9fb4e76b2f93607857c4a2e3f8b3d5a495f64f988c47b6_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:4ceabaaa1fcd3c008c4feb99ba712f81fe8d10bee7f5626da036378e50fb243b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:b9cd86347ba410c90b4a34fe9c1b25951e0f0cd38ceca1d3ccd4bae96f084edb_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:ec16ffd6b03a94410a5ffc21644d93a6a4165b4a7154b94eee1c7f5d244fe027_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:384c7e403890ba9e1a6938b69a50b3f94f44039783b97c71e59704955f9a556c_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:b23e4d99d90a1722016965feb9f577c328a0568aba1ae459d8a9a25796a2c3c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:ce6511104a74e208aa784bc9b2a22d543f98fb557ce94727e3a13d7b0a3fce32_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:fc51ca6ee52f832a9fa84800c26694d65751bd82a1d59c01b932fde6506150ec_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:81a97f3ac75f09630817f131e3c9c10251d4b160af80e27d63157b843237e2c8_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:c0ab8ac1abecf6437c02b594021b06cd6146f250a4da189db8f7c56c2ace6ea9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:ce101d9faa980901ef059f355bfc937ce3d15211e1235f08ff500c27f94cd347_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:df94f0b9f7e3453c1ecc8e443bbfab5e6a5a6d84c0066e08334ba6cc06460e94_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:398e187f93354b5888600fab490abcd020f6c87474a982840995609fd598fae1_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:4292cf42868c55f6bb955f6d5f3c5c50b2d26f86f9a9de682752c9262b635182_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:df9b473ec4040012a5a94911fbfabc6cadedd797dfd08988f169346d3e31a38e_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:fc959ef10e076566a0dfa8c6e03f514fab62fa1d36da77b0442fd2f04b667693_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:900d3bad6082fdb93f00ae4f3e84bdb754eac7f913c133e524851246265ed3e4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:a7037025452ea5afeae8b81a897855fd2c3c3995eea48c6af2c64d25409d9836_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:a782cf8398ce4294d1f3c90ce6e58b0c6f7b909a451abf5b8584e9e2947383de_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:aec87a3549b6bf561ec9f5f0a4da146a80e218344aff512664d435c488db97a4_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:1148f072a1a1cce0d8d17c27be06488d753f9e70a93c03d5939730692770407e_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:2b31b4c4de6e4d85791a95e3e27a906f1a2eea55f5343e4f10ce4bb2639bb2c1_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:6bfa58c14b1a6bd5a494e89b3a08ee8972d1b9ad26e2dfe1e342078ac3286368_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:a4733b9f0a0554ed95196b4c45de3033f1221eddc0b761968b5ac73b656704fa_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:0ba3c5f1a5315951f0921f0d95d7dbe48d0eeb3ab4312ad2de398b790ab3b36a_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572 (For s390x architecture) The image digest is sha256:dfb111c56674bbf801dbcc2c59ea33452f86c82e4a1be19f3b9d68215571f041 (For ppc64le architecture) The image digest is sha256:f8f73e3324c38fab1e39a68e06eab3247a93100fafd04226122b1c8a53e7687a (For aarch64 architecture) The image digest is sha256:95108ee3c38e8a018f521d4b5110e3f629bd3235f58c8ee3f023f8dc6c9544de All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (25)