RHSA-2024:1255MediumCVSS 6.4

Red Hat Security Advisory: OpenShift Container Platform 4.15.3 bug fix and security update

Published
March 19, 2024
Last Modified
September 17, 2026

🔗 CVE IDs covered (1)

CVE-2024-25620 →

📋 Description

CVE-2024-25620 — helm: Dependency management path traversal

🎯 Affected products53

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:17ace1adf247a7db77b4efe82550b78a8cac86e4c3b013dba7f40dab24339811_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:9a2e21c79384af07625ee3633ffe4a5062bd40fc79514ad53fcb732c31f9b3f7_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:a0426d394fc3c761095ba0a5a950a848a6e28b29a30a028671451d919f6f28f5_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cloud-credential-operator@sha256:c7ae92bf193aae8ff3e5069a9a02f2ee1102022e19d95e0dea95e53d758097d5_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:7e827cd3b4c471c8358ba48889091d27570ff677a4694bb97c4b729958b7aa69_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:88bcc7f5cc252d66079ee7c4ba610910e8ad96c24f22f704977bb835933f3019_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c7805561da209665f1dbc9b97d96f710871b067ed349696d90f79d01665e6246_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:dc3bd18e5efd55497be564ae42a9452195ac7624ae9909ccbd5bf7cd383d1ad7_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-olm-operator-rhel8@sha256:070f454594088d457a23b131f8e6449e0f71fa91679198d9f0a5c5e83a6bb188_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-olm-operator-rhel8@sha256:2bff65ef9bd4f321ffdccf569772dd48ee84b9b74d8a00313037884d969eed6b_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-olm-operator-rhel8@sha256:8d8f74b111ba028ed2a6689dd88ac0a5b17deb04e5a967a95a13a50c5370a7aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-cluster-olm-operator-rhel8@sha256:fce9b8f74f4aba59a0bfb1a8f29859d5c820da9503209bdcc3ccd48be84c16ba_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:12d6f3d7e2805fb5992778a0aee0541fc3865dadae1c3a0fc62f3d9c032c259c_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:3ac3fe5acafec2f6c6e01ef78b4bf32ee4dfdf4f8b811c1be15461e0b6df83df_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:b26146adbb150acabea098b6724054bc8ed4bc6e75cc08764f6aea855c0b8e08_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-console@sha256:e2c3a4477638754a138f8554a45e7b4158978363350bbfe5c6d96cd813ff8d73_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hyperkube-rhel9@sha256:67fcbb5bbe11d0c676e535ee83a747c27650abda00eca9cb161bb682628b5022_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hyperkube-rhel9@sha256:73e86d314d4ec1e5ad0a913dd44a627c15fdc0c62c36a792851bee55c09d8771_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hyperkube-rhel9@sha256:7496a932300c7f7834b0234c5683dca210b3d160c1c30047daf1c9467bf9c078_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hyperkube-rhel9@sha256:ce94941d4a1eec73f690087fbabce95ea1a9a51f737e40719dd0e56321f955ad_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hypershift-rhel9@sha256:139132fca36a9dd8ea76d35a380f196ca68493f50a015b4a6fa1041fd8c7ee0a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hypershift-rhel9@sha256:691aed5a56f2f1e2eb6f6d19b6396feacf21e4eb75acb15045a1f2da2acc6f79_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hypershift-rhel9@sha256:a06bec747e5acc847d8b7faec047cded9de6a99859bd42fda5c23e054e87b37f_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-hypershift-rhel9@sha256:ede27fe3d22d34edf0900d7eac05082aac0427c85022be6221f816f5c9be4292_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-machine-config-operator@sha256:2cc3174c2541912cfcadcd8ade47363aa75d4fb80f1a0b712d88ad9fd11eea97_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-machine-config-operator@sha256:98c49783da2d3c39a9ed52fa0d6acc733533c2289f8515d4c448d934d142f6ee_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-machine-config-operator@sha256:a332609763a558eeae79bcac4bfd208fe444008c699c9890b8341956f4085e71_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-machine-config-operator@sha256:e0648d8cc1ee89c9378f67c0caf0b15c788094dc7f32d64bc0841f1653d1128b_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-olm-rukpak-rhel8@sha256:233187f8bf152f98cec72512273bf25906ffedbeeeb6bb1a288155707c491dc4_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +23 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0 (For s390x architecture) The image digest is sha256:49cbea5ea2c96c976b9fc65f02866b68bd9be1bb26baf3cf2d7127e15e1d0387 (For ppc64le architecture) The image digest is sha256:49fb1443be745aebe1470ab2ad6c3780ca24169f8b4bd98cd4cc86a375bd72db (For aarch64 architecture) The image digest is sha256:83ef2e8dce0f422926447eefb662d47bf91bce8a8f4ea25640561c251c1282ea All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

🔗 References (10)