RHSA-2024:4321MediumCVSS 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.15.21 bug fix and security update

Published
July 10, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2024-6104 →

📋 Description

CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:20ea073bc78223fd06ef8f51a2870ff6d68e5e97475dbaf900f4eaad0f0d7c0f_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:716636344016058c3de522c9b116f650bb3fbc3f09e048779aa64d6459b79335_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:d8dce7113d920a5a15a4dcec5d53b98d512a4a06e13cbbeadf5a6ba5bfa8fe05_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/cloud-network-config-controller-rhel8@sha256:e36a326056b04db1fd10937b34e0d46adca886e70e08e649ad05a43e8448b17c_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:51d53d4f8dd1be90c4dedb3853b7fe77f012b8c4b58f8476380e3153f87688af_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:7e0c0eb3023bc33906e00af6071a311e297df5750eb47db39484746ae38daf97_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:84a4cf3c1ce2dfa2909aa2e07e6e02751ae734ab97be598b7633048e92652f71_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:e86afde0ec8161ccd16639225a2f5efca285509629760e63335667aefbd042ea_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:216323563d97d4c1b43c758275038b957a117cb7b8219574070be6dff245e03d_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:9fd0a16bd248f6559698991e24892fc6279acc6e29de179e5da0850b555b2bd8_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:a8832ad9f06cb9125aed4c25f17d7759483de8013e0b148b6c37f1f58b621fde_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/egress-router-cni-rhel8@sha256:b6ae8041f049c4b81b4d0c3d971e6edbb3cdfcf959a8398a40ca5ae7708e7369_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:0aa306cc844a178d97fae7655712cf75ab2282f9e934f79d394ce04c1d309498_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:2ebc3976bfaaafa2a9428604748374086c09d264dcbc8a506e0c56898e09e8d6_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:30d5526a309888cdc86ade78bbeac6e458f963be20c1ef1d3092fa6538354c1b_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kube-metrics-server-rhel8@sha256:51c8e40103458184f094c9ed3551d728c2094c9b9565825cad895fce8317d652_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:00ce112b647b4a685d5b3ad758508e49310a274922da41fd3303fcda84a99dfe_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:14c06d1167e368e1c839ad911b853cd19aaceb0900786c8faffe0ef86b969cc6_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:6d41bc11b72abb159ed9d1239a0e8d875ebfce8aa7ffc80a973d5b0900d5f446_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubevirt-csi-driver-rhel8@sha256:fd12c87b9d7c9235120493c1e5a9ecdc3b7b788df66067d18fdd4797a3ba82b5_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:0968f83d3864bfce5af301a72a371360624674e815d24d409196bc65755a9869_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:5a119a04f097ee51e4997818e58b1c19df24ff1b78452fb4276c7031564ab6e8_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:93c69f0d5c02f361a2806a08795b31384f1895e379312afbf132d0cc951e5fa7_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:9587ee46719bf388fc923cad3963ee96d1e52b00bf9faefdabfb38224c7a5ca1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:0b9424592f413ed0985f2303f7f491abcd1b7f1af960e99e231cdd3a8aa06dbd_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:3f5d3d837a6a3c9372838d37c941dfb3e465107b8edcc45fc55fa55761047439_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:a3957703ca1b07e20aedcf056348a256453a9dae7a00e172e752a7308598bf98_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/openshift-route-controller-manager-rhel8@sha256:c4dc49ff0071b68adb94bd4d502188c259fd4507706cf221c3061e1b9cc9beeb_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:076781571be1857d451ea3507b248fdde0eac62b5a2f3a8f0301f55b20dfb947_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0 (For s390x architecture) The image digest is sha256:fecc002eeb4d0ade69d0e299a0e4555fa96b0d4bddb0516ea80156cf6cf3f875 (For ppc64le architecture) The image digest is sha256:10b7baff9f474403f32ccc9e0122e94f55635ee69679de11fd737b60951430b3 (For aarch64 architecture) The image digest is sha256:4dee9622e97c3db960e7336ce6196be5f8165dadf8d1f8f441884521a16e8a79 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (25)