Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update for openshift-gitops-applicationset-container, openshift-gitops-container, openshift-gitops-kam-delivery-container, and openshift-gitops-operator-container is now available for Red Hat OpenShift GitOps 1.3 on OCP 4.7-4.9. (GitOps v1.3.4) Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24348US | high7.7 | Exploit | ||
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- Fixedopenshift-gitops-1/applicationset-rhel8@sha256:0b363d4585532f8673fc607e757b40b8e78a794539a60e7766efbe29e6d884d1_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:435439882f34fc487ff8c2606145c931a7480869290b7c5cdc3ca101b8354a96_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/dex-rhel8@sha256:23359cdf86879be49e4ad727a7e32e0457b3e2618ea6d72b5515098812772158_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:1d18cfdb839ff44dff1e2fdc9da4008c91ce25758328f200b9e282bfd8c7c08e_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:d7c95e762e992b14104c482cfa1b2e017d8d1cfb45e507e9840cad211ddd5068_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:252b2925e966b60180643884b910b09111104c03facc1264ef7ea692efce70d7_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:72fb789851fd76c39d4387affffdddcc4897fd904edebcc169aad65ccc304fb1_amd64 as a component of Red Hat OpenShift GitOps 1.3
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0682
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan