RHSA-2024:4846MediumCVSS 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.13.46 security update

Published
July 31, 2024
Last Modified
August 18, 2026

🔗 CVE IDs covered (2)

CVE-2023-29483 →CVE-2024-6104 →

📋 Description

CVE-2023-29483 — dnspython: denial of service in stub resolver CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file

🎯 Affected products73

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:0bcda7ea69575cc4816c6426befb461a6218f013b0109f49c2f3f625e5d25804_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:632f869e666dbd723c7572e4461030928308368dda37028f808e6b4fc94bd996_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:835694c613bc79e9c6f027510520a2db9cd7213d63fddec5485cfae40259e359_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:e543e5df44872d4c489f6f1d692468cb64368750715bbf8d09512421a0381041_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:23459e47a4b63d648b3297710bb0768ebcdb6bce17e1a9af1242a40861928023_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:2b3e0faf75a46992663d71c373a66aa6173794d4a21d117cdf6d35df4c3f3b5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:3ca320ba6768675b21948a4e905b77dec367d9f33923c0a59c2c2b8da1d43e9c_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:ed46d539379a93e74ee70d42fa9119a4f978173cbdf89432305fc724e338767d_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:317324f5abe01e982dac69a0ebd290953f763b53408905f33c84ab6067a9a60c_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:364bad05d2d9cc44ca8f8bc7922c6dc7c84f575e00a32dfdf31482c9ab8642d1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:3ce268a3945895e8df18fb225974b3b8bd8e2ab937d8331bd523c0b2aac0a8d2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:3d3ee9586bb7591e2a978fb85db84d3d02b3192ba2daff81e3f2d7ea2f8662e8_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:594a8f1fc1fc6493e91a997fea13354a4d633d5e2d007e5ed449a3b1c83eb248_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:7319c954115c3bec30426b15552917c21a5b9ad714488972c25157ed71ac1854_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:9f1a805fdfd9da967e0c2667445f20701ea6cb71719a8d37e2b6d72bfb75b245_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:faf25bce89bbf91446b1e9770bbb578af348571ddf0b5b3fd0ef37c6a771cb37_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-credential-operator@sha256:3418523e8ef6ce8201bfb8af260ceba62e0f247a3975f0ff61c166a1f83570d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-credential-operator@sha256:5f8a3522b4945882267b8ffdc846e76fde187897987517e45437136d8660a0b0_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-credential-operator@sha256:b8e236506f4c73280f398bb3f43e326ca8d377a57ee6d7c1c68a766dbca126c9_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cloud-credential-operator@sha256:ed2bd2420147caa9fc4794f46511d01c81a7a3e328db5ac97ce646d6fb43568e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-dns-operator@sha256:1702b7d09893ea1b71319e2bf9f74f206679a611840bd82cbbbc2db7bb341e90_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-dns-operator@sha256:44d65adbdaa58fac7cd6a085dfcb80dd779d0f0c08bdbd9d249f17ea5310a88b_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-dns-operator@sha256:80bb789511e10c9bc70e76acdd90b757587a459a941bebd0bd3bd77918dbf61b_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-dns-operator@sha256:d10d616457d31dd7551f4c45ae177fa6701d8fed3ba9cdee87c0493a5b719ece_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-image-registry-operator@sha256:16d982bf0eb0dc4a5c759a2055a26539513f736453c3a4304ebae00527e2936f_arm64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-image-registry-operator@sha256:43d74f04670fd1637a536fcc0208d528b36dff7e864d7eeb4d24bdc8f3af18bf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-image-registry-operator@sha256:c73e40e970cb5715aba4f23e3f736ef0344c1438e7c291fdd6b28101020b28de_s390x as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-image-registry-operator@sha256:cb91b9143636ba7c5ebb983349db487116ff0f21d136bc57bc0372786a2191d2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:18dda2d31d592e9146b559b0a16593df52ed2c6cd42b9c982dbc5b41c4a2983f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13
  • +43 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:de889d3c3837ff9111765d8e5a4855e8b763dc759cb465fa2ebfcf0395d3f6b9 (For s390x architecture) The image digest is sha256:d251ffc6ca44c6ea15033e108a0b1a2aeaf53ed2aa96bd7957093320a727b0ce (For ppc64le architecture) The image digest is sha256:03dbc2ab47b87f9b54ec74f33352dc6f9bf637c773632107af8d832a96e2c061 (For aarch64 architecture) The image digest is sha256:1efcffa500a457d96ef3762b2de14f3dc80ac9aa55e747e8228572b986a6228d All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (12)