Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24348US | high7.7 | Exploit | ||
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- Behobenopenshift-gitops-1/applicationset-rhel8@sha256:8b317cf28ec94757e661e83075ab9ac8397c4940197366ee5e0091d9423f7cc6_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/argocd-rhel8@sha256:6ebac7a8e959032d7634d2992e18efdc12668dff7a50cd94d080eb11d08b9c30_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/dex-rhel8@sha256:3a3635a1d9782966131d131ab0296c86e7b9f501d2940bab6e7cbcae4255d221_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/gitops-operator-bundle@sha256:ad293cc67f56184224dd0b22a6f7653d47ba2e18ce15fd6e510817ff6bd371ba_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/gitops-rhel8-operator@sha256:5fea603d0f8835221752df1cd30d76a6d59764f9d3be4d6484a5ca59b2cdd90e_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/gitops-rhel8@sha256:4342da4644f5aefa762759737c6173dedcd2518ef2a264b2f0d6bdd2465d642d_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477 - Behobenopenshift-gitops-1/kam-delivery-rhel8@sha256:097a5325971ee7a7a0a9d2ae45d0adda3bb8df09a3d39e496ebfaf7a19a173a7_amd64 as a component of Red Hat OpenShift GitOps 1.4
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:0477
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan