RHSA-2024:5808MediumCVSS 6.7

Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update

Published
August 29, 2024
Last Modified
August 7, 2026

🔗 CVE IDs covered (3)

CVE-2023-45290 →CVE-2024-6104 →CVE-2024-24790 →

📋 Description

CVE-2023-45290 — golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:405f17ab51096a0131f8c0441308550b9cfd1993fa37988b26279f26af6ab16f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:bd4570d921532a57ca6d9dd3c86f933c3179f188de3987813f233849abaad9af_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:5f8a0ab8cd9c6e3dc572f13580d7ac62bd4d4f84b066d949888998d039ec7f44_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:a88f9d30cef4002c0b6aab570d2693dc55bb022f376cb6a8a03d66aa1e21367a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:16442e74b4b2cf786e513001d3cd05d69e2c33072142d492fabdf290e4958fea_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:78ef7194f271fd4067f2eeabce6bd3737cd216a71d1b454b35eb7b956814fd0d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:cede72e5bdaa686ddd9007b751e36521c610d96450f0c4806ce68bfc51bafc0e_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:f4aaf190a3bea3c6c626f609fb7e164653d7514231a956114f6935ad40f09e6d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:334b030e89397f0855cce9541c4cb03b50bbd2a0e4f85d1de750a32a635668fb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:63b7b3c9271e718363be5287a5eea5f3ecc1119ea2f2abdcc6b6b94e9453e160_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:efea29c23056ba790009404106a6f0a4560b73708d5be7e7b7c1097ddaf936f1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:4d2cde2b981bd72c7c23078f99b21b656a9d2bd469669eb81e88d3947ae8c57f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:ff9c0765704f99468884118443dd6edfd0a5a2cb842177da4dc2601114f28343_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:09a8720e27ca92c0a5932892790b2f3149cbf2d5ef7502cb1bd695d4c7831460_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:ab112a3b43b5a46bca116c3a3b8b560562ec18131de70a1b67fa23043e55c92b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:1b39092784e012794674445d85d4234a3c252fe11929c2dc3b61ff98e4e6c888_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:5253d2731bbde31dc5fdf7533ed46103ba4a464f27d888af0ac9c599dfb428ca_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:875642ee75e16817edeb86f768d32fb7566767f9d8561e189a57e432b5d3cf02_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:fffb020c04207215d59ba8cf9596e33b515c8aaa3775999504bac82845d02bcf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-orchestrator-rhel8@sha256:1d04e10366fe2f94dbfe7c62d419696477911a1b544d9e5f85b8b3d0f7e50ddd_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-orchestrator-rhel8@sha256:bc501c9987edea6b005db162c519be8763f3322153e27424a779950bf28fe1f9_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:79cc533deafc44f45ba44f269f083a1c6d49ed35310db5e81d8b3041e2c2ce4e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:0da080aed4d18270c9aad45ccd6db74d722eed847a743c4e394d255ea05b0e07_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:509fa48283033d4004ed418441ace03d1b6632e4d63f6421ad058cbd275b5d02_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:8456bd2fb2501c37d9dc3efaca17bdb9312d540d454f86eb5852763f13a9b629_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-apiserver-network-proxy-rhel8@sha256:c673c4fcaf4f76b941ecdc62278ff811f17c53d558d6293716fbb8e5722bc804_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-apiserver-network-proxy-rhel8@sha256:d9dc687c78daebd047190e776a7c1bda81f9499f3b57f7b6e5527d95b2f754b9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:6b9d2e44f4a10d59abb430eedcd19f89e99df41840333564291fec9befe6dc43_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:2192556afac3c99bf2d971d73bd322fce67b86649f71dda33013a312d2ceb603_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:669170342e3ae3456b2eb00dd0c45cd817d62af310e0aa2bf214f1da65fae9d0 (For s390x architecture) The image digest is sha256:6b1a8c2a2e8ef6a98ae429e11dc85f594f819ba7d3229800ce944c5b3f77d227 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)