Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update for openshift-gitops-applicationset-container, openshift-gitops-container, openshift-gitops-kam-delivery-container, and openshift-gitops-operator-container is now available for Red Hat OpenShift GitOps 1.2. (GitOps v1.2.2) Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24348US | high7.7 | Exploit | ||
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- Fixedopenshift-gitops-1/applicationset-rhel8@sha256:de60b8e0019f8cd5900ab934761c289973b8e80f74c7f343e9b8c7bdab35ec7b_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:ba9c8eb1b6ab9633a67f82038a8d597f070e9d1d3bee50bb3944b5ccbe6c539f_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:d9db3e25b20c2a28ba1a26ce466b1d7f0bb7b34e354c75029ef7a6ee21b3b580_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:4b315cd3607577f9187f97c9df7a65a5dc94982d6166bf0d2fc7cf8c1ef7246c_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:8199d51003b6fb3e180785a905c0f757497567bdba3ec2427812aad6f803942d_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:e977766c14c86eb12734b908afa3286b5a66297bd11ffa4f2f5500e5051b9c17_amd64 as a component of Red Hat OpenShift GitOps 1.2
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0580
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan