RHSA-2024:6637MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.32 bug fix and security update

Published
September 18, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-47108 →

📋 Description

CVE-2023-47108 — opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:69a2d259c4e9b5565a9838910c2be5e6192f81f674bc88aec9cf139a27bc7bcd_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:b3eec1fb5375459e9be89ac9c1e3dacc42676bd75914c4b044bb1578a6ee3e76_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:c3f273e272efd554987a47a7499debabb6888870a3de227e7c3079f7a57e83b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/driver-toolkit-rhel9@sha256:d3fdccb2385f20f22b528577e556e8bc79f8d0511a22f913726ea58d4c098e58_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:65aea9064e318a3f096181e1e08c8236b96a5d7ef54786125f13fafc3c1607b9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:822eebd8c0ed4e26bbdb388eadd7d165967d7482055f15231e826089f7529982_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:9521716e4736aa7fc0128878157f2923254f91fa5e06751db98f66baa30f6796_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/network-tools-rhel8@sha256:9deed9d01a48abecb217d687ab70b215cd8c98848ae20a7c6c5db60215392560_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/oc-mirror-plugin-rhel9@sha256:21f9ed7ec07d6f9d31b5d94e09aa4e72d070a32330347162dfeb7ea9d3f0f59a_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/oc-mirror-plugin-rhel9@sha256:22b1d6aecdbf89692bec40e20601962c846db92b6d4cca260f7345cd919228e3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/oc-mirror-plugin-rhel9@sha256:8a455fbee4e8b4ac65c26ba29dd0c7a4a617c7d895df27156d9fa54f4c5d1ab1_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/oc-mirror-plugin-rhel9@sha256:a6ce106757856df808966f84d0a6a4b212d372faab4cb199cd38dbf0b2ccacfa_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:2c4ebbe416deafa190c8b5d8dbd2d5579da054e2d2dd8d8ffda056037490f14a_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:852cd2930a2fd15ccc480264cdd64eadb90b4c08a4966231ec283d3411145f01_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:8eaafb27452a905be2b081ab9892296aafa18d639ee77cb30c49549a8909e6bf_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:a28f3472392066bc541faeb025c4e958bef7875a0c53269078e5dddd825598c9_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:541036dfad533eb06471068d6dd2c27e471a12545c809e64aeb988d39948cfde_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:8b011adef86da4de17a2de8514227c8f04e5079c264b4770a7bd7f5b361ba40b_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:8e8be99ac9592871dc9b894980e895044b68f38b93135e45dcc0805b7cefd9af_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:dfff07c1d186d65567d64d886bd6e0215ad813af67dea9ecc757fa2a155f82cf_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:2b7264a3a2bfe8d005beee45b056630fd2f1322d3e9bc7afe322bbad0ec3dfeb_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:8fa5e4905f1fd54424551b1d56f3969a1b365aa95bde28b9144e95640024e426_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:9521df689af7a439f9a8b61a82553cd950f9e7d174193e645a021258e33014fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:bdf7b6ff2d1dd88ac9abcd2a550d9efdf6d188266cdd09650a596dc28cbb5adf_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:b6fb47d5c1aadfa97fff3df40df4fda3e9eae109ab8b479bbfffecddf1813430_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:cfca11e781fb3e80814316ecb6a6814b29359cb5c1694001217d4cc6f398615c_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:dd9fa517fa410e63b471462839fdb578166373ece94ce1ffb86865cad4e07e1a_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-agent-installer-utils-rhel9@sha256:efa0c44a23dcc000cdcdd194fd0d3be735bb947628236d85826925eed690fb97_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-alibaba-cloud-controller-manager-rhel9@sha256:694ff9be5d7494e413eb704f89dcb706917a139b9634a984a1178d2b1cba26ec_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:66b135c7313b6394cc584369ccc96f57258b057875cc8a2f53d073e4da436120 (For s390x architecture) The image digest is sha256:86078020bd265c45db67e654c074f72af51c8a2b9ee9c4a2e8c00559aa11eaa1 (For ppc64le architecture) The image digest is sha256:a0f83e131256931cec283abc8398c3f47ceb634766bb5e4c09d606ba2aa2889f (For aarch64 architecture) The image digest is sha256:57728fbcca49f40adbc8f7a682c3f3c528b6cc10ea9e9a2c697da0249e04db18 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html Workaround: As a workaround, use a view removing the attributes. Another possibility is to disable grpc metrics instrumentation by passing otelgrpc.WithMeterProvider option with noop.NewMeterProvider.

🔗 References (12)