RHSA-2024:3349MediumCVSS 4.3

Red Hat Security Advisory: OpenShift Container Platform 4.12.58 security update

Published
May 30, 2024
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2024-28180 →

📋 Description

CVE-2024-28180 — jose-go: improper handling of highly compressed data

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:1528c0c2993130c070fc126337ee14f924edc8268f82af7fb7e2ffecf05cb51e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:31cfc40eeb9a5522bf5a0312e2166f8959a960966a0fb4a2cb2cbfd67021b4be_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:767481e41de54d4dc855a6e62e2ff6797171a961f6d00cb3afd7ac68c4245bd4_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:8894c2a3c2d95dcd40ce3fc94c48660a46fbf63459197ad9d23431a46fa27f42_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:63a2a2ddfdb11b3f757a9a4ec5c0c10e80bbba215e3c9cf81f4d482faf66c0fd_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:a64b67441b668c3b60d7c30b3ba6481f41f58b73ff95e4cd974f83706e5bee7c_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:a91814e81b830249f08955c4936fd80511e58e5668d3afa1402b1ae007262081_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:f3cb2c60980b18072de50e76aee105449a297a9b003e87de3352e05288ef33bf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:0da670496cdbeb94a4fdf8b6d9d18999b12833b100f0747982787e889cac58df_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:31ed8b4f59fe323417749ae5659355fc093b89b2f72f42f81078a3180e352415_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:4a5b9fe690996ce87c40f92e16bdf84585f0ebcab58d6b1d847ed0c71ddba626_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:a50e93dd9e668763257c87a1780db3591c6709462060fae2d2b3fa8e095c3744_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:176b2b8badd6cd9d264502326f218f27759ac8a70613bca7d40c9de5be32551a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:380ec6ece7eb9245a9c833aad03272122e47586838d64fd796ec125c9264e909_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:d2e79eac0a6b763f6cb3366156a01e594cfa581a4a0b7918a85c3d57a7673de5_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:fd2e8a81df11672d5171aa3d757cbf54ccf5e5d87779323f35c7c3d2c8466a47_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:055c3f35aae47b46ae0461edbd9885ff855fdd968594035747c16f1606100921_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:2170a3a0ad403bc03d84ea51477db3269bd51db32ebc40c7d3e55328c310ed58_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:787793825b603869a84da93a8345ce7d74c019a72bc96300df1f90f182da1325_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:e3b475a0899ea0a5fdb9cb0a6ba0da8093793e8ff14faf7854a949f389f02a6a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:0009fd1a6ac2daf9aa4e34da2dd0e624baa12cac36f1215f883e7d00c847a825_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:00d52695b5aa4a1430fc0bc012c461346a4049f2086593a40e81a6ad1c9d6eb3_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:478cba308a52d863ca1250a73dedadee2dbc889931a447f8b29d753ce9758d29_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:649d81f44b4e15a342d411d68d2f0d990ff498684d4359c211dce80426869cb5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:bccd5e8b63e2b26c73e4045581717e7349c32ecb33cb292bb4763ad74ff6131c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:1bed3d551f023da08ed960161d63f3a616a60283dbb8e5481f97c290b77a8eee_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:59d725f99138cb100c7f7b4ca17a2a116cac5040cd11672b8ddb40529e3adfb7_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:6c7ed5b26a7bdf5c99c64f94b893fc2c1456cff83cf99fb4d346889890a35522_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:7424320c98202284f2e3802bb8b5cbef44938ad5141650c184e93e9c66a81df9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are: (For x86_64 architecture) The image digest is sha256:b622d947ade4a13754e9d9f6803107f1b321eecd925c897f3c12de1aafccbdc5 (For s390x architecture) The image digest is sha256:f04201f48d294c46dba4b6c8c590f603fff4863d28953212f565982f6ad12870 (For ppc64le architecture) The image digest is sha256:4547d4e8b4fa8784ff9139e57705f6aa0245e1a517c10c5a78bfc3b423fe5dc2 (For aarch64 architecture) The image digest is sha256:0708b13473726e5bd1a7a8367099a3cf09048488205cdf3d056ef636644bada1 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)