RHSA-2024:8581HighCVSS 7.5

Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.13.2 security update

Published
October 29, 2024
Last Modified
September 4, 2026

🔗 CVE IDs covered (6)

CVE-2024-45590 →CVE-2023-26115 →CVE-2024-43796 →CVE-2024-43799 →CVE-2024-43800 →CVE-2024-45296 →

📋 Description

CVE-2023-26115 — word-wrap: ReDoS CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser

🎯 Affected products36

  • Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argo-rollouts-rhel8@sha256:2923b31fa984b09a7974b409342ff6e14427768414ae2467c04cee209e7afaa8_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argo-rollouts-rhel8@sha256:95553f2dc8ba42ab4edbcdbc8a40d93c0b12eaaacfdadbf71ee6274fd673fe2a_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argo-rollouts-rhel8@sha256:96e150bfc1fe845c352bbaec4854b4b26e81cde91b7661099a7a39849a40643d_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argo-rollouts-rhel8@sha256:c3ceef4676048019e0f6e28ace17b7c94d3b9865822a173ece821fd2a3f53071_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel8@sha256:b9ecc4f6b152c6ecb9873fa816358e07dcec33c527c3d62c62c6b3b97c092178_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel8@sha256:e5192c24b2028c3c8f8b947d9b210c16e1325780d601a49c4edd55ef227aa647_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel8@sha256:ecb87bf769c3fd4c7c81e9edd5316dd97f71b5b6c8c37fd4c6a4f9bd974d8628_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel8@sha256:ee433b9616283cca5376c65ae95e36d3817c443004d5276e61360607b931f676_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel9@sha256:186239f05f44b766d008ad69fad5ce21ebd9ba0801ef1c82c97d3367da4b2c4a_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/argocd-rhel9@sha256:192d044c792f4ee7329cf7f747882effb6576bdbc5f237f9ac3290c820ca1553_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/console-plugin-rhel8@sha256:05aedefa7102149096e29848df97f8ff9f68cf7ee4083462082713ab0f9c4483_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/console-plugin-rhel8@sha256:0a63244b20c75093dec239bdc17768ddf75d9a0a9064e95d5cee48369e45315d_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/console-plugin-rhel8@sha256:1785dc9f74a2512e9d7ea8c87b59c6d39429e8e4fb2acb69164001c5facd9f87_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/console-plugin-rhel8@sha256:71804b03a935480d4ba16bbbdf8235f1f8740f480ba1f36aee2d4549706b530d_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/dex-rhel8@sha256:52d513e678748f160a5d9e9b2370bfdfb9913ff5380edfb3fd4f21b0b1280a16_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/dex-rhel8@sha256:678380e333de28bab04b92cc87443be9cc100ecf1045f282d43190f94bedb3f6_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/dex-rhel8@sha256:e4c637729b569870551747e9eec2f58702358ecbda21a23ae823c65c77fc4732_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/dex-rhel8@sha256:f71670f1fb3ac209dd8fcbd4ea508484005fdac546de5f32cfa343ff5f898f05_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-operator-bundle@sha256:0e41fde95f2b68ce8c359e4370accb1f5526382ce415a6b9eba8cdf18e188c94_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8-operator@sha256:1e62eb2397a5c51591a18d3f10d76d02ad68af9abb8f2b0f385086554ff65224_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8-operator@sha256:3d371ec0e2a5bd87fa475e5af1e1e1f81219f71628a3b0ffb889919b47cebc91_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8-operator@sha256:4058eb8fced167b2ca0c8a04e9a3b7c42a650cfaa1bb366a474e5392b5de7986_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8-operator@sha256:6c4eae579cfb4b1a28212de128fa56b11effd0701198e6b4ecff9e31c097f288_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8@sha256:02250b997f2778a3dccead719e9a98cddf564bd4fe747d36a185fbc6ca13b947_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8@sha256:6289e27f28a0a6589d6998c83bf30a5a5c0e4de8c6600b16454acbd4764d90b0_ppc64le as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8@sha256:abe87df56ea3954c7e74ed2e6a9c25904282f08eb9d29f08b443431e9090919b_s390x as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/gitops-rhel8@sha256:e7a9c00030a1dd9cbb0d423516557dc758bed570f0154d98973eb10fda3a74c9_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/kam-delivery-rhel8@sha256:2c1efdabe8fc8cdc164e1bf9d94543444ac0b7e61ec73afc18e5dcaa62da3eae_arm64 as a component of Red Hat OpenShift GitOps 1.13
  • openshift-gitops-1/kam-delivery-rhel8@sha256:9136191a543bb966f7054dcea8288cb87cfa97eae0d7492dcf333d16f3ca9769_amd64 as a component of Red Hat OpenShift GitOps 1.13
  • +6 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)