Red Hat Security Advisory

RHSA-2024:4626

Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update

Released 2024-07-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.11 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/console-plugin-rhel8 +6

TI-2024-16848 CVE-2024-25620 · GHSA-v53g-5gjp-272r

MEDIUM 62

Helm is a tool for managing Charts.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00567 Published 2024-02-14 Partial fix · 3.14.1 CWE-22

TI-2024-17237 CVE-2024-26147 · GHSA-r53h-jv2g-vpx6

MEDIUM 41

Helm is a package manager for Charts for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2024-02-21 Partial fix · 3.14.2 CWE-457

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835