Red Hat Security Advisory

RHSA-2024:0692

Errata Advisory for Red Hat OpenShift GitOps 1.10.2 security update

Released 2024-02-05 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.10 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8 +6

TI-2024-14997 CVE-2024-22424 · GHSA-92mw-q256-5vwg

HIGH 72

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

CVSS 3.1HIGH 8.4 Network No auth User interaction EPSS 0.00484 Published 2024-01-19 Fixed in 2.7.15, 2.8.8 +3 CWE-352

TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88

MEDIUM 52

A path traversal vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2024-01-12 Partial fix · 5.11.0 CWE-22

TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r

LOW 34

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2024-01-12 Partial fix · 5.11.0 CWE-20