RHSA-2023:0804: Important: Red Hat OpenShift GitOps security update
Security Fix(es): goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be (CVE-2021-4238) go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064) ArgoCD: Users with any cluster secret update access may update out-of-bounds cluster secrets (CVE-2023-23947) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0804?
The severity of RHSA-2023:0804 includes multiple vulnerabilities with different impacts on system security.
How do I fix RHSA-2023:0804?
To fix RHSA-2023:0804, apply the recommended updates provided by Red Hat for the affected software.
What vulnerabilities are addressed in RHSA-2023:0804?
RHSA-2023:0804 addresses vulnerabilities in goutils, go-yaml, and ArgoCD.
Is there a workaround for RHSA-2023:0804?
There is no specific workaround for RHSA-2023:0804; updating to the latest versions is advised.
What are the risks of not addressing RHSA-2023:0804?
Not addressing RHSA-2023:0804 could expose your systems to potential security breaches and performance issues.