RHSA-2024:3713HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.59 bug fix and security update

Published
June 12, 2024
Last Modified
November 1, 2026

🔗 CVE IDs covered (1)

CVE-2024-1135 →

📋 Description

CVE-2024-1135 — python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:0358a8e26fded74e2b3b99fa7dd6d2f5fdbc1d5a6e1a8e85580f45492cb2bfe6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:28f39ab4a8e7769656c0cb8499805dba3a5faa67bd8630113fbbeeed93031164_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:4297a98069eb86ce211f47330510cd85789eac45957f2ce802b1361a5d9d151d_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:a1b77a3600494384d9b589bf4bb7acf3ccc03b2386fc711f08f9d6b09f11a800_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:0593844f77bd4d57caf211dd9aecc0d00e3c9e7ec7933043f2a18e9ad69a12b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:169f5785a809997aeaa9103b2c07d94094003ef8678c0f2bd8937fd4656ef0ef_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:69009bf3c27542eda1d7aff327497fff5f7156ca160960d5cb091d88a0cb83a0_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:a49c9d246a4da31a8fd4118b828aba973222503d7f2abc8cae1af8851898740e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:0dca1470db2fc39bcf38ffa78b53022693907e47461bf6b76b50c08061759cc2_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:7649d65f40abd1f964a60a429f997a27ec7f5cf709447fc4d79d3a0aa7e18867_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:c91997bb6ee0d1964cb0488a73c9460d5a4d04af58c0a0bf1b03ea7436b69a74_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:f06f9c6758ff584f2976614b355a97a72e05aad08c2b03fb8de01a785e8861ec_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:36df382433e1cabbc208da47369328a1308efa6b170969fa9affce3c6357b2e5_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:5220f643db7980cc7689e3c785c496dc3a4f609415c67c66312e41a23d43d014_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:72a0b77d0fbed1a2d87ab243819f62b3299729c86d092f44ee26b197d0f3f1d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:eaf6cbf479d5f88201ccba61096281e870d6631ad1c196cd1cec7efdcad85326_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:57fea175e9e8275375e89f52b5d2134d6feb5c4a8d83c01b0a814bc3812360d1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:6a2fb9a3b22795d58c211ba5ab2cb0256db6824633484a9feb3830c6ed433d23_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:7c765792d49b9a78f56717dc2cf4d85f1a1c3bf21960c4a08d59f6adb6f3c78f_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:c6cebb6f570975692dfbe0638f93e3a8e56f91117413287f74e37d4fb159abb2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:ec55037b4577dd020da54d8c8d83961868f064c7dcd389791a14ed031f86bfe7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:1bce3dc128f319ac2793acb7cb700342fc35f5b35c97cc29d1f437cf61e70a84_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:5fd699abd0df384a6e0c30bae81aed533dd3c651a07ca3fe336883a9d5aabeeb_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:74fbac37ad0f5f921a1b92be311973cbec58240ff03d17767fb3f96e2cc8b243_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:d56126663dcfcf1f13471447e126fbfd3f10ed6e8b306a87d064a39632fc94f2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:434210cd987782453f2b88462e86ba1335ba8bc1396f2e96aa00ea49a7df8d18_arm64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:56ed0a6403e1ed2d4d1e4467bb4eb97592f15cb22be4268f90879286636e5fe1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:dd2ead8502c627961027c565508bfe074f8f57c98bc7a89fdde448649f84de2d_s390x as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:fcc38f52cb2c3ddc1c8181c4beffb9d7ff8d5c3027c9b389a4f4eeddf8b93e48_ppc64le as a component of Red Hat OpenShift Container Platform 4.12
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are (For x86_64 architecture) The image digest is sha256:8908e5a46f106e7520faa5f5ee679033c4c2f0026f1b8a339e6b3ea4becdd969 (For s390x architecture) The image digest is sha256:c591525140e99a733a71ec09db2688168a50537385639ac2786c0fcf5af80203 (For ppc64le architecture) The image digest is sha256:e8a52b12867a6ec15cf9153b4c9f4bf3e1ab7626c35cd7854c8bc145d9b2a9fd (For aarch64 architecture) The image digest is sha256:b3149ccbc7979c497fc972f2b0f56ba9e954baa9b0e0881d283c6facb176d46a All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (11)