RHSA-2024:4316MediumCVSS 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.16.2 bug fix and security update

Published
July 9, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2024-6104 →

📋 Description

CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.16
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:709da9d29ab8354d27fe05b75e488c6cacce7f771c63d1be571f279d78775caf_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:9abf3fe37214c385a6c696a0a4c47a3de83cc3600eeb465a877b0fb2c97a02dc_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:e52213957e5d45beb68a26e1d11bcbcf727da78fc90435b81c59196276ddd330_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:f6b5bf6d6128d4bf72715e7f9bf01a8075c6281c886699994eb7fdcf53752273_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:38c9b5e43ffec7b2f7a3d2aa986dd0e5890a1914d637893800f31738b8203163_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:554baa02768637c240c9d77e3ebed1c9f812215adc5a723871759dd6792c228b_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:774fc8584ff872132cfab475a50754fbfeddd5eb1ecc842861b34ecbb22deee5_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:8eb570271e53e182c69e5c5b2b6de6d57c36dc8a24c233c424a7e321890a9c67_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/cloud-network-config-controller-rhel9@sha256:211bef57d258c95e85e0aba1efb466abeb69bce79c030c3d4ffec988c653af78_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/cloud-network-config-controller-rhel9@sha256:7d80d7fa97f634cf43c1643a1bacc950e1b4ae4758d641a6f10a4525684cc960_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/cloud-network-config-controller-rhel9@sha256:bd92bfd1ebb366b49c1420a9f67d81f979e5e008c27f72dff1f5945f7784a884_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/cloud-network-config-controller-rhel9@sha256:ff7ed423b464f6c633a10f9619711e034e41b0df6e2c60ec8ba255eb2a8e56da_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:9936f04bf940ce6d1df6c17eb011b178139dbd66ee84563591de608c76fcf4a5_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:b7dd930b129d8029dd377d961c99190dba25b58059f8171394fe15bb492a66ce_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:cfe2c86e7461047929498d8e6dd10313148e7ce17a39a3161278e9da18fd60c5_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:fc5d2084db5db3e254697b23fad5f473377123efb4415690a51135e6bd79909f_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:b5d52d2c6e2496ba7e1fd9ec36bd501036cbf2a3f3834f30dc9ce6973156e643_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:c020c5a65d53e5c03af0914403de8728daddc96ff7536e934e844fb81ed16cd8_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:c486f46397ab64db59351bacb9c1eae1f2a40df492f39849c855e2bd74b9bff8_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:e5e6de7572003ac560f113a0082594a585c49d51801f028f699b15262eff7c02_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/egress-router-cni-rhel9@sha256:35d88a8f34f0f4597bbc2797861a8195e973dd05f629a0752d1c8de178569ddc_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/egress-router-cni-rhel9@sha256:e56420014ea17e1196a6a67aca991014137b6383d9acebe5e545206a6c709719_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/egress-router-cni-rhel9@sha256:ef91e9d4026c2727daca037f20d2772947897ac1dd46724e5597adcf2aebf3a8_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/egress-router-cni-rhel9@sha256:ffd94a70084a22e189cde1d3ebb43b6628ee9f96c997c5490abbf348c4e1fea2_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kube-metrics-server-rhel9@sha256:67048e692fa0b045c5898b3c49c3e66d038aab4682db06f59d0559f349e92a75_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kube-metrics-server-rhel9@sha256:78d93f684563e7cc5a7fd8e335f3b2de62df46f4f50b06729a7102259585da1c_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kube-metrics-server-rhel9@sha256:bfc98cb9a55e03916f8a9dcdb5b98e042d728f9bbda67d09e2e481234c9d83ec_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kube-metrics-server-rhel9@sha256:f2cd706fb98f8ab0481d4e1226bd78eb2eb07167b0540ed57c89e5f911c9b6f4_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kubevirt-csi-driver-rhel9@sha256:377d13bb29abf4c13ab4877ffd163b9ae0473acb75fec7b72356f96882c2c810_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:198ae5a1e59183511fbdcfeaf4d5c83a16716ed7734ac6cbeea4c47a32bffad6 (For s390x architecture) The image digest is sha256:7e2b55fe3613ed08dbdcb504deb22fccbcf9b7b91ee2cc87460f1c84c1c9774f (For ppc64le architecture) The image digest is sha256:dbe974a7a0aab97bec07d3f4655091aea892c447c888238b5bb2a57284650c25 (For aarch64 architecture) The image digest is sha256:250b9972d03463ba38a85b657066aa0706bf348608797aa50ddda769d4afdf27 All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (55)