Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.3 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24348US | high7.7 | Exploit | ||
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- Fixedopenshift-gitops-1/applicationset-rhel8@sha256:7027540d0244496785cd368a3802d551f974f5114735966dc4b5846ab70832cb_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:bc5e750413e3806b92a548029010f82aee0bede3b0fe918fd53c280e2384359b_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/dex-rhel8@sha256:20a85d451ff3697f5d7c3f55d4776832cdf7a6a90623ce72d481dd6becad3b97_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:636a040e83d025996d133fc6f90a625aed2d8bb81db45c23bb8e11d6d5571993_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:99cfc9175851012da28592bc238e297a56ed10496bd94c1409f9a87338f2f58d_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:9f1072299358f38ab62bbd74e7d1f8af16b58c927b3e8d0626efaa0382bd4623_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:79571b309fbb43ca9141bc4cfa24f4b668ffc9a7947fb3d6d55065f4a71bac8d_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0476
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan