RHSA-2024:4965MediumCVSS 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.16.6 bug fix and security update

Published
August 6, 2024
Last Modified
August 7, 2026

🔗 CVE IDs covered (1)

CVE-2024-6104 →

📋 Description

CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file

🎯 Affected products164

  • Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:76b295ed27d83fcc8292667a593a7e9641929e866e4d49a8f886bd91b43ce9c4_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:8a093e2ebc4895983f20fbcc7a478a56a2b8730944de2fe0982f578209c2d478_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:eb6e940e986d750e8c223508925bf853847490e3a27975ecc599fcfc97717e5d_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:eee8b4b003c58e3a437f02add6ce4482ddf6ca6e0f883f2f5b5cc99569ce4609_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:9fee9368ddd5d6ea4b537f6d5b47a2667d92df01a4861a408c4a48a71e0e7cd4_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:b84e89da34a04980342ea82a7d537caedd73875cb8d01513b02df69d7b5cc197_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:c9a8aa49233adb845388bb7fb6ccb4551b9acee37486335ea985cf5ca0b29507_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/driver-toolkit-rhel9@sha256:d00bda2d25cbe078e1260fbe7257dc135a0a93b876025c041c0d937141bd806d_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/network-tools-rhel9@sha256:0e9d02166d371eab2c2f6a88414e4a8e26ba024149ab9d484e97f9492bfaf001_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/network-tools-rhel9@sha256:13297a5f07cc2953988812a1fd72793ecd0a01495ae43bbe8e5ae4584a921561_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/network-tools-rhel9@sha256:786a76fdd76e9c1407ac3f5a94853c77dfe9826e3a327e6ddcdd670872f02863_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/network-tools-rhel9@sha256:a190c08c606081b027f309c37fc8d601f3272b4be2aba1d37ecb4ab8a54f581b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/oc-mirror-plugin-rhel9@sha256:8888b1d9c21bdc924d6353734fc6bd2c5ec95201ff951d1a47190a01b51687cb_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/oc-mirror-plugin-rhel9@sha256:8ef493a9a1e7065dbea9d67b68f2cb93a513134d9dbcdc873cb387abd33d6ac7_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/oc-mirror-plugin-rhel9@sha256:bdf39704e7bbb2ae156b1e6dc1b11b3834ffe4cdc7228a69eb0a60aca32829c5_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/oc-mirror-plugin-rhel9@sha256:de2ff8632b183ca7b80f0d40a23c930a8b2fd6a2d43ba41a8c9bc09cef8e720e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-installer-rhel9@sha256:7c9b4ee55964b106c2c9d83bdcc5413a3bbea8add4387465a7cb7d102f524a93_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-installer-rhel9@sha256:829b116a6e67b68ec6455a477ccc2850e50f9335be52c637336fbcd11928e1ac_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-installer-rhel9@sha256:cca15835c194c1ea8882d2447f774153430d0660ee44154483268261d343e749_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-installer-rhel9@sha256:d7544e2487da5a12645e42e3ca4156c342cd563b18361851390966bf3bf1e939_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-rhel9-operator@sha256:5b001c0388c400c867ea1f3faad70f815cd200cc7d47b27147a6f35e1208a6ad_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-rhel9-operator@sha256:b92790f5107c864636d028d9c864167e234335a8797bded157e17d692acd8f03_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-rhel9-operator@sha256:d31504d18fe4b8db23fb854221e88854f13dbb905f192295577635cc321cfead_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-rhel9-operator@sha256:edc97a7678e85f0104142be33d77c90c49419539e4b9c78edeb5e5898a15d926_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-runtimecfg-rhel9@sha256:0edba4258d075d1e5c895adc4b6b5bc54d2fb037419795340f15d10e577ab483_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-runtimecfg-rhel9@sha256:5c85d62aa94a81a1ee9d296bf5d31c38778e3c3315e73c27951877e6e408afb7_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-runtimecfg-rhel9@sha256:8ad028ff5e6890b10b04160e38aafa9d56159f94059654c4b54f87440bf7383f_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-baremetal-runtimecfg-rhel9@sha256:defbb57f4be28680ab5248d6a028d0953b6b9eefd0246754238b469731816f82_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cloud-credential-rhel9-operator@sha256:b3eca7289accebe26a2f80eeb724e6bf4d6625cc1a8594f1f14257b32cd770d9_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • +134 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:24ea553ce2e79fab0ff9cf2917d26433cffb3da954583921926034b9d5d309bd (For s390x architecture) The image digest is sha256:d70b05b4fb4433c2e4e32f7d54a325124465fdcbd637996a79a4aec038ebb79f (For ppc64le architecture) The image digest is sha256:3613a013b35613dce5b63c82d74711037d68a31df95cfc8899d7aca3ba048824 (For aarch64 architecture) The image digest is sha256:69384bf4d8aa5f7acfefe742c8a2cd7eb6c8927400158f0d4174fcf757fb602e All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (26)