RHSA-2023:3905HighCVSS 8.1

Red Hat Security Advisory: Network observability 1.3.0 for Openshift

Published
June 28, 2023
Last Modified
September 17, 2026

🔗 CVE IDs covered (3)

CVE-2023-24539 →CVE-2023-24540 →CVE-2023-29400 →

📋 Description

CVE-2023-24539 — golang: html/template: improper sanitization of CSS values CVE-2023-24540 — golang: html/template: improper handling of JavaScript whitespace CVE-2023-29400 — golang: html/template: improper handling of empty HTML attributes

🎯 Affected products21

  • NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:37a3f439c5a55366727163512a1eccbb7962dbc086d8a79287b7476207d212dc_ppc64le as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:da2ef6762243a73fbb67cf3b5d70194e69c1d10bcac02e59caedea03061e4577_s390x as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:df7740057c2c606ba8480ea52bd633f20959a458d533a9a3210c4a13e475ca21_amd64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:f3ecfcc041d2c01287f437125df492a7781f9094850513170ebcd54c94737103_arm64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:47801e613c40d0a07f22d3aea6f95708f512acbf09e4c30b683dba7dfea53e9f_arm64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:589f15ee6f2d80e7d4e9e28fc63ca7e5d56f5a388634ce276dc57f4e27a0a89b_ppc64le as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:7e340285995d87c203cf9125dba0ec9c6fbce7eca90e9979e1f81611eae0f736_s390x as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:d40cf50e30d0f475dad272520f332ee437b35b6ca4b786513e73a930e3a88eab_amd64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:23e28210806e49df576c16d1e599e8a0ed5dea19154f1c5baf9add9fa2d2833c_arm64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:bacfb687cad8a421e7d1c6743c16ce1296af9bee1a845d7cf337deba3df809da_amd64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:c096d0c061cc92ec7db12111cd95117960c970a10043a4c77b0c0506a23f2d65_s390x as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:c45986d378f644b5824b03c29ce6033de81219603446121fee0833e5158a702e_ppc64le as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:5dbc838683ee0b38a6aa6829ef98d64dcff1be89f58ac2a57ed5dce03ed3713b_s390x as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:b03f4e88ab1fed4744356a584d673fb2fdb15de7e1de7786bdd222b853690670_amd64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:38b57c0ea502708bdc49fb47fb9c50bbc93ddb22b941160e4a1cac0f2afc6856_amd64 as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:414cd50dc5e204226eb32b21da876aad3edba2c7b5a8a935e8e275773e63d56a_ppc64le as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:4c485468c25f82c49c68b4b7a489c636f834b09f0c52debfd6311a54b0366505_s390x as a component of NETOBSERV 1.3 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:a06a3a4a5604d0e2bad7eaa63b98a12acc86ddbb2e9cbf3470fd5157a02f7bf1_arm64 as a component of NETOBSERV 1.3 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (21)