RHSA-2024:4850MediumCVSS 8.3

Red Hat Security Advisory: OpenShift Container Platform 4.15.24 bug fix and security update

Published
July 31, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2024-0874 →CVE-2024-3727 →

📋 Description

CVE-2024-0874 — coredns: CD bit response is cached and served later CVE-2024-3727 — containers/image: digest type does not guarantee valid type

🎯 Affected products49

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:10b09958285e35d1b5650f65c9529af55cf7dbc8df8dde959fd9e329109e0e22_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:3c408fd22a03b012ca9e6d3d37f8b5af541231e9b728fd964ed15c30341883ec_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:ecbe01f20e2169ae76dce32b7cb3a16545271488601a635756fe71959d026604_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:f5795679574a352b52cebd793c55d0c4ce03f4aaf2c787a1ccb7d305a20f8586_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:05f9d802900b2e23465c593f5a3f7335b2f3f79fd65780bec9f6e910238c900f_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:21688b76861b1d6a6d96d209ab7a40193fee15d511263de4fde6dca6879d1908_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:34750d444686a546d089de411049de34a2da6d4b5eeb1371b90585de9aa10dfe_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:8515ce453bfac15087bc476616cd91e3cf473753f35d955dad197773dce9552c_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-image-registry-rhel9-operator@sha256:0d78794f29f3009f8c0bd82bd310833b990c89f43fdaf6bf93197225269364da_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-image-registry-rhel9-operator@sha256:3cafb94f71981d750073781f430b4f2b8a115f10845ee23f3b0c9612f6697832_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-image-registry-rhel9-operator@sha256:9a256f5ce5c6bf2ddc4a6018ba4ff6e7a12a4617b11b749fb80c1c41e8184b06_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-image-registry-rhel9-operator@sha256:e8d13e181b0d61182c644ae1737c3ffd2d861b57f2b849235641ca235d2035f7_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4a0e50bdde22987d5c40494584d4fded8f0120d6288b3be8e35b20e411ed7397_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:addbfe6a86ab7d98b983c9001a262028588b83e326bee490cee3c595148d623f_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:bb4059d222186c7384b2bd244d96017a0cf0310c13790736ce87db831547274c_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d0391a5087fdaba6da8adb3d938439297520042991ae956237b52b0529f87413_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:1510b18921d4fef7e7a76249f13a0da3090115c29aba3f0448e147ae0ec77fa5_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:8f2cce34fde81a8f9b30901278ed26ae295ea71d337ad3ad9835ee00467d14b3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:94ed097987afe3abcf3fbecc8552132985d65d54f665cc1a06de7c6465538347_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:b3ca26bd4fe34ac0dde55c3966011b82e493e283c87323c9591d9c1eab2fcbb5_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-coredns-rhel9@sha256:0c16d413ea08c1eccbdb6706ca43118de919a279ab86c66c95201883ac54e889_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-coredns-rhel9@sha256:1d96a087eac8c22a30b2b39478d248f6404855e794762329539aabfb46eaeb80_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-coredns-rhel9@sha256:ecb4cf9278334dd7ba523addafe33966d5dd0007480fa8e802f4e870cea042f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-coredns-rhel9@sha256:f15ffcfb856a603834584d3818b93609f0e7ab6a4290bb332c5cc18482e865cd_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-haproxy-router@sha256:186ec95c56f6c742173523873d4f1166564b06cdd4af9dae055af1b03f4a19de_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-haproxy-router@sha256:acf3e277707191e82811a1d4b139db21d779a21bdf093ca8961b47e9227f5031_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-haproxy-router@sha256:b65bf51f0d1cebe8e01698804021a3e5b20a3e26cb85a4eadfda26b96f872df9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-haproxy-router@sha256:ba09f72cbf69253534480dc6d6241852e43630112bceb6ff511717c8e6b0637f_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-ironic-agent-rhel9@sha256:0a17a990c559707de11893f5856e0e439ddc545626574ddf468e5f8d43bf35c8_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +19 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:88d387f6fdae0c77613041aa6166ea35b301a3201becb8e1f354065ee3ee3a6c (For s390x architecture) The image digest is sha256:6766993fb25bdda0a00ce38c9be6d4629c0a1f2ed219322940a4506287657c4e (For ppc64le architecture) The image digest is sha256:6c0dce1a86f2336bb7493ead9d8c85b116208dbd9356af87ea34c9e2b0628324 (For aarch64 architecture) The image digest is sha256:d29f09c0aca5ea05c86964f741e0d86575fc4dd39db709ad8e644cead54c3588 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

🔗 References (8)