RHSA-2024:5160MediumCVSS 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.15.27 security update

Published
August 15, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2024-6104 →

📋 Description

CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file

🎯 Affected products85

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:b6b1ec265a2de8011c366e81075d75f20d8d6490dc9598813f14a06b78af8ea8_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:ce8edbb2dfc4dbceaca44cffcc2c38766b30de309b82e01e87d46bac3b1ca723_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:cec84317d4cd99fc3857438f29fc5b59ea5143f47848a0f0dab73b515ea582b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:e28e2b91d3a994c1098403aef48f0a2a32e3464dc3d3c62c67f4742f734edf64_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:3e10ccf1c2450715784156a7e9b375f0edab434ad5962054670bd4e32dc824af_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:61f83993d65f4aeddb549095bc1cf659afda9bfbaada6e69219e7cd4e3f9e490_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:7bfa528a449ef7230363d14f3ed7b83422c35e47d656f8ed8d9e46f3d21722fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:aebd798322516f0a67548c19eadc9286ff0816a2d49f8dc0c7f7d317088eff25_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:141e566c7cd2a6040c5144c46f7a3a1938c37d8b23075d51f3e5d5d87fa59f8f_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:937027dac25a8b38eeff4410bf0fb769076a57fafd52ff686dd97a71dee4cd3a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:bdfdafcdd0dbd38ed15dffd043c3d1a6627c7128112e4dcd6455bc74f32b8370_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:d97251c1db64a25c7fe1b64b6a6663d98b8914c20dab5fb7ecdb7341659c1f89_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:9010659a021411365862e212a833f9a468eb72db9ba2c3977026c0f03afd1eaf_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:c2ad2f4bb9dc9e344a92f3eb5c8a4eb8a8d0b15b9a92ae29886dbadc16fd1b53_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:d362819e3ad9c6e0b77cd0e88febae1d55a251e04ea4680bd1155d5060c37292_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-baremetal-installer-rhel8@sha256:f970072129ba7eb956bfdca5b8a898ddd4f7a1130556e465c7c5fb729c5bea85_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:399cbcb2fe6e56fbbbcf239a1f6c617ebf9b30e68c6123bebab9bd6a72da8be9_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:64428ee049d63624dafa871b99c313caab0c8c0013f7e340d57b9b13f7206793_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:a944ce2c45db5619825257474ef6d42581de1cb4ac9b368592a764becbba67af_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:d8ac262ab6d13bd793d6da9f9d019c1dc1fa70dac8e5c4dada6d948b3fc7c9ed_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-capi-rhel9-operator@sha256:740840c31c753b651e7b782a174413d63da76dbe9fad55b546f923e3e6d2be5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-capi-rhel9-operator@sha256:85981f4816380bcd0db259dedb8172e804365f1ad52dbd296f6c89ebaaf60743_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-capi-rhel9-operator@sha256:90a023cd5fc6641fdb983489e75e23cc7271affcdf4399f415492c87439f5a9a_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-capi-rhel9-operator@sha256:c50419d9d7d61e21fe58956d320715cd8caddf0ff6f8d6aafdec869cd80f3d6b_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-network-rhel9-operator@sha256:3916aa3ec018e4c67c4d27d1212a855a9ac2a0b764dbb047b64026e84d8990b7_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-network-rhel9-operator@sha256:bfc16b078bd2a2dd46bf86fcc6dc81b862e86e44ced2ba70c38c922259639a74_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-network-rhel9-operator@sha256:c282a6b6201d8dd81095c8292a5cf78dfff82d12b23fb146770dca42808b121e_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-network-rhel9-operator@sha256:f95d16a124ab6640404000bfb769d737fed385fd5c532813dc222b22fc2457fb_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:179a9fd0dc6fac89aa7493a69b16d60bba36b5dea57eaec39a681f226a79b8ee_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • +55 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:6534b333dbc2a19d0a04b69b000ccfe3ef2ac293419ec1a371efc288e25094bc (For s390x architecture) The image digest is sha256:349778cfc24853ed0a5b52ec6635a2a4871e94e82136d5168072a1337e3eceed (For ppc64le architecture) The image digest is sha256:fcc132c8c360d45f8bc3e929946a4eb4c142255cdb6a397aa10e1973d9243ddc (For aarch64 architecture) The image digest is sha256:c2457fc579eb29b21db87490cbb904189d5db34bfb09b2ac7be5af7884995263 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (15)