RHSA-2024:5951LowCVSS 8.3

Red Hat Security Advisory: OpenShift Virtualization 4.15.5 Images

Published
August 28, 2024
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2024-3727 →

📋 Description

CVE-2024-3727 — containers/image: digest type does not guarantee valid type

🎯 Affected products101

  • CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-controller-rhel9@sha256:28a9a211cdec97b7da40baa2096e879c60cd6ee82f0f18faaf68dec09488c061_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-controller-rhel9@sha256:a3be4be46dbde0a95596ccd5a8039d4bad56e014aa0120e8032423be6c16615a_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-operator-rhel9@sha256:9e96a54223b6fb64f43284706ee5d6fc01427416aedcb503cf994ecce73e9440_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-operator-rhel9@sha256:a72f8f880fcf62fb9a00482e1f5fc1fb674084a1f0db01c6a6349c6419ad55ad_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-server-rhel9@sha256:8fbc415c770572995cd802c4e08455ea6852d47b92c893438664529119e4c9bf_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/aaq-server-rhel9@sha256:d71a5116890efe52ed0ac90b5f20b833dfb451441490b8e05018beb80157302e_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:df0b66cf8d9e70fa75a105eba9f1c50f1eadfda68ce6384c008a5ef36e3155c5_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:eaf9845c9fffa6d60dabd64dc84eb3c19f80762d49417a06698b70585c29886b_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:593f09a293fa7422cc257715dc97d76a691dc4338ac929d2c0d0622016833200_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:5a5167c5acb05473cf93f16cfbcba486f56670444b543e61a4a41ebbdf51e199_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:38ae02c00a65057ad33b14c554d4e9edb9a45b8bb866eacda4d5ad9368c6f005_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:f3e255095989592e96a8c142abb54d06556e48a9af7c5737c50c1c8b8670cb0b_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:6a619546331a13f81077f7e416a591eaae461167ae30857056fd48afdbcefcc3_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:f9e3f7096a874cc1086da3da8f69f799bb1aa401dae608e248d8e2af7654e4dd_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:9466629ce617bcc8786d8d382dce2569d1069fdab28f6a2671a5392895798f6d_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:c60e81738876ece0fc5acff742fa0b360db1ec87d4be030ebc6459a2c863b339_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:88fe0843acd2bb9c558083843efe989264ecaf780de1a4676096dd2c5aa243aa_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:b0571e5dc5f9a19eebb2efd94bed896a103d66056dcbcab006fdb8cfaa99fb3a_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:90b08535c22527423c4fffdd32d0c80f909420d726ac40781e5e7b387320c5e3_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:b225caa085288ee4c45f5d293ee97b8745bce0aecf7a84134d8491296e6b383a_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:981199581e77a499c6b3a5e830214511c1de69fc371285f5ba42fbca5d3d06f2_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:dc94d997ea034fca8f291e331188cdef27260157f729279dcf675c08b00b1781_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:671f03778d8c2a74f5e3539beae72a170ac219e5cd70c1a5db2d9b876fca8090_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:7a4cfffceb261da2a1b02d4fdcaa200614470191ba4014023e27be7ba34f3708_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:6e5bd7f46424f25b67815575a52baaedf89535a4a66189a8194f5ed65f6bcc9a_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:bd3e737c04d04d9621d37e088d7cc9a0e2a8da52d48479bbf252eced42d23cee_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:14af89eba937218eea87f4bb4f3bf6aee04848b11993e2c60180b1f0bd7dbb49_amd64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:ee0be4213eedce5a96c7ae8be7e8388399f0a5ea89fcacce58918fdffbb2ca7d_arm64 as a component of CNV 4.15 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:1a1c0572e447b2cd80ef2527b0505cb34d350457f191bcf91dbefba7601ab223_arm64 as a component of CNV 4.15 for RHEL 9
  • +71 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (9)