Red Hat Security AdvisoryRHSA-2025:3069
Errata Advisory for Red Hat OpenShift GitOps v1.14.3 security update
Released 2025-03-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift GitOps 1.14 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
Fixes 6 records
Priority MEDIUM 53
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03181 · Published 2024-12-11 · Partial fix · 0.31.0 CWE-285
Priority MEDIUM 44
go-git is a highly extensible git implementation library written in pure Go.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.01278 · Published 2025-01-06 · Partial fix · 5.13.0 CWE-88
Priority MEDIUM 40
go-git is a highly extensible git implementation library written in pure Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00717 · Published 2025-01-06 · Partial fix · 5.13.0 CWE-400
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333
Priority LOW 32
An issue was discovered in PostCSS before 8.4.31.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00973 · Published 2023-09-29 · Partial fix · 8.4.31 CWE-74
Priority LOW 30
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00465 · Published 2025-01-30 · Fixed in 2.13.4, 2.12.10 +1 CWE-200
THREATIST.IORead the docs