Issued:

2024-10-24

Updated:

2024-10-24

RHSA-2024:8263 - Important: OpenShift Container Platform 4.16.18 packages and security update

Synopsis

Important: OpenShift Container Platform 4.16.18 packages and security update

Type/Severity

Security Advisory Important

Topic

Red Hat OpenShift Container Platform release 4.16.18 is now available with updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container Platform 4.16.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.16.18. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2024:8260

Security Fix(es):

• encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)
• Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (CVE-2024-9341)
• go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
• go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Solution

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html

Affected Products

Updated Packages

• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el9.ppc64le.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el9.x86_64.rpm
• podman-plugins-debuginfo-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• podman-plugins-debuginfo-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• podman-tests-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• cri-tools-debugsource-1.29.0-6.el8.x86_64.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el9.aarch64.rpm
• podman-tests-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• runc-1.1.14-3.rhaos4.16.el8.src.rpm
• skopeo-1.14.5-3.rhaos4.16.el8.ppc64le.rpm
• skopeo-1.14.5-3.rhaos4.16.el9.ppc64le.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el9.x86_64.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.aarch64.rpm
• cri-tools-debugsource-1.29.0-6.el9.x86_64.rpm
• podman-plugins-debuginfo-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el8.x86_64.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el8.s390x.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el8.x86_64.rpm
• ignition-debugsource-2.18.0-5.rhaos4.16.el9.aarch64.rpm
• podman-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• podman-catatonit-debuginfo-4.9.4-10.rhaos4.16.el8.s390x.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el9.x86_64.rpm
• podman-4.9.4-10.rhaos4.16.el8.src.rpm
• podman-remote-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el9.x86_64.rpm
• podman-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• podman-plugins-4.9.4-10.rhaos4.16.el8.s390x.rpm
• podman-catatonit-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• podman-tests-4.9.4-10.rhaos4.16.el8.s390x.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el9.ppc64le.rpm
• conmon-2.1.10-5.rhaos4.16.el9.src.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el9.aarch64.rpm
• runc-1.1.14-3.rhaos4.16.el8.aarch64.rpm
• skopeo-debugsource-1.14.5-3.rhaos4.16.el9.aarch64.rpm
• openshift-ansible-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el8.noarch.rpm
• containernetworking-plugins-debugsource-1.4.0-5.rhaos4.16.el8.ppc64le.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.s390x.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el8.s390x.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.ppc64le.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el8.ppc64le.rpm
• skopeo-debuginfo-1.14.5-3.rhaos4.16.el9.x86_64.rpm
• podman-debugsource-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.ppc64le.rpm
• cri-tools-1.29.0-6.el9.x86_64.rpm
• buildah-1.33.7-4.rhaos4.16.el9.s390x.rpm
• ignition-debuginfo-2.18.0-5.rhaos4.16.el9.aarch64.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el9.ppc64le.rpm
• podman-catatonit-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el8.s390x.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el8.ppc64le.rpm
• containernetworking-plugins-debuginfo-1.4.0-5.rhaos4.16.el8.x86_64.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el8.s390x.rpm
• cri-tools-1.29.0-6.el8.src.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.x86_64.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el8.x86_64.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.ppc64le.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.aarch64.rpm
• butane-debugsource-0.21.0-4.rhaos4.16.el8.s390x.rpm
• podman-catatonit-debuginfo-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• podman-debuginfo-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• podman-gvproxy-debuginfo-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el9.src.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el8.x86_64.rpm
• podman-tests-4.9.4-12.rhaos4.16.el9.s390x.rpm
• skopeo-1.14.5-3.rhaos4.16.el9.src.rpm
• skopeo-debuginfo-1.14.5-3.rhaos4.16.el9.aarch64.rpm
• ignition-validate-debuginfo-2.18.0-5.rhaos4.16.el9.x86_64.rpm
• butane-debugsource-0.21.0-4.rhaos4.16.el8.ppc64le.rpm
• conmon-2.1.10-5.rhaos4.16.el9.s390x.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.x86_64.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el8.ppc64le.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el8.s390x.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.aarch64.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el9.ppc64le.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el9.x86_64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.ppc64le.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.x86_64.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el9.s390x.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.aarch64.rpm
• podman-4.9.4-12.rhaos4.16.el9.src.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el8.s390x.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el8.s390x.rpm
• podman-debugsource-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• butane-0.21.0-4.rhaos4.16.el8.x86_64.rpm
• ignition-validate-debuginfo-2.18.0-5.rhaos4.16.el9.ppc64le.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.aarch64.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el8.aarch64.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.s390x.rpm
• ignition-debugsource-2.18.0-5.rhaos4.16.el9.x86_64.rpm
• cri-tools-1.29.0-6.el8.s390x.rpm
• podman-catatonit-debuginfo-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• podman-docker-4.9.4-10.rhaos4.16.el8.noarch.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el8.x86_64.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el9.aarch64.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el8.ppc64le.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.ppc64le.rpm
• cri-tools-debuginfo-1.29.0-6.el9.aarch64.rpm
• cri-tools-debugsource-1.29.0-6.el9.s390x.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.aarch64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.x86_64.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8.ppc64le.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el8.x86_64.rpm
• skopeo-1.14.5-3.rhaos4.16.el9.s390x.rpm
• conmon-2.1.10-5.rhaos4.16.el8.src.rpm
• cri-tools-debugsource-1.29.0-6.el8.s390x.rpm
• podman-remote-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• podman-debugsource-4.9.4-12.rhaos4.16.el9.s390x.rpm
• openshift-ansible-test-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el8.noarch.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el8.aarch64.rpm
• openshift4-aws-iso-4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8.src.rpm
• podman-plugins-debuginfo-4.9.4-10.rhaos4.16.el8.s390x.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9.aarch64.rpm
• podman-remote-4.9.4-10.rhaos4.16.el8.s390x.rpm
• skopeo-debugsource-1.14.5-3.rhaos4.16.el9.x86_64.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el9.s390x.rpm
• containernetworking-plugins-debugsource-1.4.0-5.rhaos4.16.el8.s390x.rpm
• containernetworking-plugins-1.4.0-5.rhaos4.16.el8.aarch64.rpm
• cri-tools-1.29.0-6.el9.ppc64le.rpm
• ignition-debuginfo-2.18.0-5.rhaos4.16.el9.s390x.rpm
• conmon-2.1.10-5.rhaos4.16.el9.x86_64.rpm
• cri-tools-debugsource-1.29.0-6.el8.aarch64.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9.src.rpm
• runc-1.1.14-3.rhaos4.16.el8.x86_64.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el9.x86_64.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.ppc64le.rpm
• runc-1.1.14-3.rhaos4.16.el8.ppc64le.rpm
• conmon-2.1.10-5.rhaos4.16.el9.ppc64le.rpm
• podman-plugins-debuginfo-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• podman-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• buildah-1.33.7-4.rhaos4.16.el8.src.rpm
• podman-catatonit-4.9.4-10.rhaos4.16.el8.s390x.rpm
• podman-gvproxy-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• cri-tools-debugsource-1.29.0-6.el8.ppc64le.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el9.aarch64.rpm
• buildah-1.33.7-4.rhaos4.16.el9.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el9.s390x.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.x86_64.rpm
• runc-1.1.14-3.rhaos4.16.el9.aarch64.rpm
• podman-tests-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• butane-debuginfo-0.21.0-4.rhaos4.16.el8.ppc64le.rpm
• cri-tools-debuginfo-1.29.0-6.el9.ppc64le.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el8.ppc64le.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el8.s390x.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el9.s390x.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el8.aarch64.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.s390x.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.s390x.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.ppc64le.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8.src.rpm
• podman-gvproxy-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• podman-tests-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• conmon-2.1.10-5.rhaos4.16.el9.aarch64.rpm
• ignition-validate-debuginfo-2.18.0-5.rhaos4.16.el9.s390x.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el8.src.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.ppc64le.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.ppc64le.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8.aarch64.rpm
• runc-1.1.14-3.rhaos4.16.el9.s390x.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el9.aarch64.rpm
• podman-catatonit-debuginfo-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el9.ppc64le.rpm
• podman-gvproxy-debuginfo-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el8.x86_64.rpm
• podman-plugins-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• podman-remote-debuginfo-4.9.4-12.rhaos4.16.el9.s390x.rpm
• ignition-validate-2.18.0-5.rhaos4.16.el9.s390x.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el9.s390x.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.s390x.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.s390x.rpm
• ignition-validate-2.18.0-5.rhaos4.16.el9.x86_64.rpm
• podman-4.9.4-10.rhaos4.16.el8.s390x.rpm
• podman-plugins-debuginfo-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el8.aarch64.rpm
• cri-tools-1.29.0-6.el8.aarch64.rpm
• buildah-1.33.7-4.rhaos4.16.el8.s390x.rpm
• podman-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el9.ppc64le.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.aarch64.rpm
• podman-debuginfo-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• podman-debuginfo-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• podman-plugins-debuginfo-4.9.4-12.rhaos4.16.el9.s390x.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el9.aarch64.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el9.ppc64le.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el9.aarch64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.x86_64.rpm
• containernetworking-plugins-1.4.0-5.rhaos4.16.el8.src.rpm
• ignition-debugsource-2.18.0-5.rhaos4.16.el9.s390x.rpm
• ignition-debuginfo-2.18.0-5.rhaos4.16.el9.x86_64.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.s390x.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.ppc64le.rpm
• containernetworking-plugins-debuginfo-1.4.0-5.rhaos4.16.el8.ppc64le.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.s390x.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el9.x86_64.rpm
• podman-plugins-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• podman-plugins-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• skopeo-1.14.5-3.rhaos4.16.el8.aarch64.rpm
• podman-debugsource-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el8.x86_64.rpm
• podman-debugsource-4.9.4-10.rhaos4.16.el8.s390x.rpm
• podman-remote-debuginfo-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• openshift-ansible-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el9.src.rpm
• ignition-2.18.0-5.rhaos4.16.el9.s390x.rpm
• containernetworking-plugins-debugsource-1.4.0-5.rhaos4.16.el8.x86_64.rpm
• buildah-1.33.7-4.rhaos4.16.el9.aarch64.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el9.ppc64le.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el8.ppc64le.rpm
• podman-remote-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• podman-gvproxy-debuginfo-4.9.4-10.rhaos4.16.el8.s390x.rpm
• openshift4-aws-iso-4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8.noarch.rpm
• runc-1.1.14-3.rhaos4.16.el9.ppc64le.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el8.x86_64.rpm
• buildah-1.33.7-4.rhaos4.16.el9.src.rpm
• podman-debuginfo-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• podman-remote-debuginfo-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• cri-tools-debugsource-1.29.0-6.el9.aarch64.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.x86_64.rpm
• podman-debugsource-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.aarch64.rpm
• buildah-1.33.7-4.rhaos4.16.el8.x86_64.rpm
• butane-redistributable-0.21.0-4.rhaos4.16.el8.noarch.rpm
• cri-tools-1.29.0-6.el9.aarch64.rpm
• podman-plugins-4.9.4-12.rhaos4.16.el9.s390x.rpm
• podman-remote-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el8.ppc64le.rpm
• butane-debuginfo-0.21.0-4.rhaos4.16.el8.s390x.rpm
• podman-gvproxy-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• skopeo-1.14.5-3.rhaos4.16.el9.aarch64.rpm
• cri-tools-debugsource-1.29.0-6.el9.ppc64le.rpm
• podman-debuginfo-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el8.ppc64le.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el9.aarch64.rpm
• podman-4.9.4-12.rhaos4.16.el9.s390x.rpm
• podman-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• conmon-2.1.10-5.rhaos4.16.el8.aarch64.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el9.ppc64le.rpm
• conmon-2.1.10-5.rhaos4.16.el8.x86_64.rpm
• butane-0.21.0-4.rhaos4.16.el8.aarch64.rpm
• skopeo-1.14.5-3.rhaos4.16.el9.x86_64.rpm
• ignition-2.18.0-5.rhaos4.16.el9.src.rpm
• podman-docker-4.9.4-12.rhaos4.16.el9.noarch.rpm
• podman-remote-debuginfo-4.9.4-12.rhaos4.16.el9.ppc64le.rpm
• butane-debugsource-0.21.0-4.rhaos4.16.el8.x86_64.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el9.x86_64.rpm
• podman-debugsource-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• podman-remote-debuginfo-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• containernetworking-plugins-1.4.0-5.rhaos4.16.el8.ppc64le.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el8.src.rpm
• podman-plugins-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9.s390x.rpm
• ignition-debugsource-2.18.0-5.rhaos4.16.el9.ppc64le.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el8.aarch64.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el8.aarch64.rpm
• butane-debugsource-0.21.0-4.rhaos4.16.el8.aarch64.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el9.x86_64.rpm
• butane-0.21.0-4.rhaos4.16.el8.ppc64le.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el9.ppc64le.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.x86_64.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el8.aarch64.rpm
• ignition-debuginfo-2.18.0-5.rhaos4.16.el9.ppc64le.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.s390x.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el9.src.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el8.x86_64.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el9.x86_64.rpm
• cri-tools-1.29.0-6.el8.ppc64le.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el8.x86_64.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el8.aarch64.rpm
• containernetworking-plugins-1.4.0-5.rhaos4.16.el8.x86_64.rpm
• containernetworking-plugins-1.4.0-5.rhaos4.16.el8.s390x.rpm
• ose-gcp-gcr-image-credential-provider-4.16.0-202410172045.p0.g26b43df.assembly.stream.el8.x86_64.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.aarch64.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el8.ppc64le.rpm
• cri-tools-debuginfo-1.29.0-6.el9.x86_64.rpm
• skopeo-debugsource-1.14.5-3.rhaos4.16.el9.s390x.rpm
• podman-gvproxy-debuginfo-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• containernetworking-plugins-debugsource-1.4.0-5.rhaos4.16.el8.aarch64.rpm
• podman-debuginfo-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• podman-remote-debuginfo-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.aarch64.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el9.s390x.rpm
• ignition-2.18.0-5.rhaos4.16.el9.aarch64.rpm
• podman-debugsource-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el8.s390x.rpm
• cri-tools-debuginfo-1.29.0-6.el8.s390x.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9.x86_64.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el8.ppc64le.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el9.aarch64.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.ppc64le.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el8.x86_64.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el9.aarch64.rpm
• butane-debuginfo-0.21.0-4.rhaos4.16.el8.x86_64.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el8.s390x.rpm
• containernetworking-plugins-debuginfo-1.4.0-5.rhaos4.16.el8.aarch64.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el9.aarch64.rpm
• skopeo-1.14.5-3.rhaos4.16.el8.x86_64.rpm
• cri-tools-debuginfo-1.29.0-6.el8.ppc64le.rpm
• runc-1.1.14-3.rhaos4.16.el9.x86_64.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el8.ppc64le.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8.x86_64.rpm
• skopeo-debuginfo-1.14.5-3.rhaos4.16.el9.s390x.rpm
• openshift-clients-redistributable-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.x86_64.rpm
• ignition-validate-2.18.0-5.rhaos4.16.el9.aarch64.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.s390x.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el9.ppc64le.rpm
• cri-tools-debuginfo-1.29.0-6.el8.x86_64.rpm
• cri-tools-debuginfo-1.29.0-6.el9.s390x.rpm
• cri-tools-1.29.0-6.el9.s390x.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el9.x86_64.rpm
• butane-debuginfo-0.21.0-4.rhaos4.16.el8.aarch64.rpm
• podman-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• skopeo-debugsource-1.14.5-3.rhaos4.16.el9.ppc64le.rpm
• podman-plugins-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• openshift-ansible-test-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el9.noarch.rpm
• podman-plugins-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el8.aarch64.rpm
• buildah-debuginfo-1.33.7-4.rhaos4.16.el8.aarch64.rpm
• buildah-1.33.7-4.rhaos4.16.el8.ppc64le.rpm
• podman-gvproxy-4.9.4-10.rhaos4.16.el8.s390x.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el8.ppc64le.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.src.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.s390x.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8.s390x.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el9.ppc64le.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el8.s390x.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el9.s390x.rpm
• openshift-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.src.rpm
• skopeo-1.14.5-3.rhaos4.16.el8.src.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el8.s390x.rpm
• podman-debuginfo-4.9.4-12.rhaos4.16.el9.s390x.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.src.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el9.s390x.rpm
• openshift-ansible-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el9.noarch.rpm
• buildah-1.33.7-4.rhaos4.16.el9.ppc64le.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el9.src.rpm
• skopeo-debuginfo-1.14.5-3.rhaos4.16.el9.ppc64le.rpm
• conmon-2.1.10-5.rhaos4.16.el8.ppc64le.rpm
• openshift-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.src.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el9.aarch64.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el9.s390x.rpm
• podman-remote-debuginfo-4.9.4-10.rhaos4.16.el8.s390x.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el9.x86_64.rpm
• podman-remote-debuginfo-4.9.4-10.rhaos4.16.el8.ppc64le.rpm
• conmon-debugsource-2.1.10-5.rhaos4.16.el9.s390x.rpm
• cri-tools-1.29.0-6.el9.src.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el9.aarch64.rpm
• skopeo-1.14.5-3.rhaos4.16.el8.s390x.rpm
• conmon-2.1.10-5.rhaos4.16.el8.s390x.rpm
• podman-debuginfo-4.9.4-10.rhaos4.16.el8.s390x.rpm
• openshift-ansible-4.16.0-202410172045.p0.g06f35b9.assembly.stream.el8.src.rpm
• podman-remote-4.9.4-12.rhaos4.16.el9.s390x.rpm
• podman-tests-4.9.4-10.rhaos4.16.el8.x86_64.rpm
• cri-tools-1.29.0-6.el8.x86_64.rpm
• podman-tests-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• ignition-validate-debuginfo-2.18.0-5.rhaos4.16.el9.aarch64.rpm
• buildah-tests-debuginfo-1.33.7-4.rhaos4.16.el9.s390x.rpm
• cri-tools-debuginfo-1.29.0-6.el8.aarch64.rpm
• buildah-tests-1.33.7-4.rhaos4.16.el9.ppc64le.rpm
• ignition-2.18.0-5.rhaos4.16.el9.x86_64.rpm
• ose-aws-ecr-image-credential-provider-4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9.ppc64le.rpm
• ignition-validate-2.18.0-5.rhaos4.16.el9.ppc64le.rpm
• conmon-debuginfo-2.1.10-5.rhaos4.16.el9.s390x.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el8.s390x.rpm
• runc-1.1.14-3.rhaos4.16.el8.s390x.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el9.s390x.rpm
• openshift-clients-redistributable-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9.x86_64.rpm
• butane-0.21.0-4.rhaos4.16.el8.s390x.rpm
• podman-plugins-debuginfo-4.9.4-12.rhaos4.16.el9.aarch64.rpm
• runc-debuginfo-1.1.14-3.rhaos4.16.el8.aarch64.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el8.aarch64.rpm
• openshift-kube-scheduler-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.x86_64.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el9.ppc64le.rpm
• cri-o-1.29.9-5.rhaos4.16.git34690b9.el9.s390x.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el8.aarch64.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el9.x86_64.rpm
• buildah-debugsource-1.33.7-4.rhaos4.16.el8.s390x.rpm
• openshift-hyperkube-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.x86_64.rpm
• podman-remote-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.aarch64.rpm
• openshift-kube-apiserver-4.16.0-202410172045.p0.g632b078.assembly.stream.el9.ppc64le.rpm
• runc-1.1.14-3.rhaos4.16.el9.src.rpm
• skopeo-tests-1.14.5-3.rhaos4.16.el8.x86_64.rpm
• ose-azure-acr-image-credential-provider-4.16.0-202410172045.p0.g0e95532.assembly.stream.el8.src.rpm
• cri-o-debuginfo-1.29.9-5.rhaos4.16.git34690b9.el8.ppc64le.rpm
• runc-debugsource-1.1.14-3.rhaos4.16.el9.x86_64.rpm
• buildah-1.33.7-4.rhaos4.16.el8.aarch64.rpm
• openshift-kubelet-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.s390x.rpm
• butane-0.21.0-4.rhaos4.16.el8.src.rpm
• podman-catatonit-4.9.4-10.rhaos4.16.el8.aarch64.rpm
• cri-o-debugsource-1.29.9-5.rhaos4.16.git34690b9.el8.ppc64le.rpm
• openshift-clients-4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8.x86_64.rpm
• containernetworking-plugins-debuginfo-1.4.0-5.rhaos4.16.el8.s390x.rpm
• podman-remote-4.9.4-12.rhaos4.16.el9.x86_64.rpm
• ignition-2.18.0-5.rhaos4.16.el9.ppc64le.rpm
• openshift-kube-controller-manager-4.16.0-202410172045.p0.g632b078.assembly.stream.el8.aarch64.rpm

Fixes

• This content is not included.BZ - 2310527
• This content is not included.BZ - 2310528
• This content is not included.BZ - 2310529
• This content is not included.BZ - 2315691

CVEs

• CVE-2024-9341
• CVE-2024-34155
• CVE-2024-34156
• CVE-2024-34158

References

• https://access.redhat.com/security/updates/classification/#important

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.