RHBA-2023:4315HighCVSS 9.1

Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release

Published
July 27, 2023
Last Modified
November 6, 2026

🔗 CVE IDs covered (1)

CVE-2023-28154 →

📋 Description

CVE-2023-28154 — webpack: avoid cross-realm objects

🎯 Affected products97

  • OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-chains-controller-rhel8@sha256:62d0ccd92e452db38ee7519bfa0caf3da6b94abf2e579dae9cac9f47ee73d72c_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-chains-controller-rhel8@sha256:a0ac81b27d508d3be6eb48debf0130b09438649d6c755864e8067f94f6d20d0e_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-chains-controller-rhel8@sha256:a83423f9e406b5ff83c9c27109afd26e9f556c192f58e97858b3c9113a61de80_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-chains-controller-rhel8@sha256:d87a9c8181d87a87cef9d73f441cb6d480e4600d8991e40d997f0829bd0ee552_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-cli-tkn-rhel8@sha256:253084ec2315eb22791e1599a139faeb9d281bbb6f2aa632abaabe9bfcda61f6_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-cli-tkn-rhel8@sha256:7c65f9fdb71e73ff98212bbd759442a92a4a1471dedf00957d77fbc4ef7c325a_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-cli-tkn-rhel8@sha256:b6d6e8e314f0c091e5b8ca81cd5510f51f267fb8a2276e8195643594323309b5_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-cli-tkn-rhel8@sha256:f557cf215e6c8e4c343d818641db6af098ba56622858fd44779dd019b27740d8_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-controller-rhel8@sha256:4575fca9801de8b3a2df9c6cde538634c7149c22e9086ef5329cce6de672429e_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-controller-rhel8@sha256:73b8c22ada7e4a56ac9f8bbd7f891d66c864bac75900641ce875310a73dd7ba3_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-controller-rhel8@sha256:92ff44a1fb04f396f0c123885245c9fabb02178335c16a92ce68efa447637eaa_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-controller-rhel8@sha256:baff9014978f6638d4004e5e162c2bf47d30245aef07009d5368e20a59c050d2_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-entrypoint-rhel8@sha256:1698abcf64312679ab6e15ab1a0ed17aae76254ab85a19045bcc8c8e30aeb7e1_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-entrypoint-rhel8@sha256:18f52fcd897f50ef0d91f8e68a0af9c72df7bbc222f8f090e391e57b93826bf6_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-entrypoint-rhel8@sha256:593854c258676247a582b9a9b7eeb300cd91b3a597ac5d1d7418229074cbbe5c_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-entrypoint-rhel8@sha256:e16c91df04e3fa8c9285c87153720979c7bc828840dfc17ccfff45ccc3f9aeff_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-git-init-rhel8@sha256:48d9e508aafd468bbc1f77077bfa1f35b8d225dc94b7f60ac57d1474352b12ff_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-git-init-rhel8@sha256:87fb62216091ad41f773b3617b8dd8d787f709ef2425f3b3a3b111b2cbdb3c25_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-git-init-rhel8@sha256:a4548467a0755dfd6ca3a561881e13c623a0f015b023e0869b8dc118b35f5df9_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-git-init-rhel8@sha256:a77238446b7deed794fb2fc6e4c158572f7ebbaca0bfbe3b11936cccb9f17878_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-api-rhel8@sha256:4b0b08ac600f1ae25e032bb517dd3ccd7e8becf18f38c5ffcc73a35ff5c326ff_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-api-rhel8@sha256:8f2f6a9d34de6581a21b9b64bdfb9363a0edb6cb4c50876338f8748bf31e4cc3_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-api-rhel8@sha256:9726613cc36dab338bd0c3ec1f63c651c1e3b24f42ba4f24cbec50ef269d129d_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-api-rhel8@sha256:ccd554ea0553d90af9a8940a8f60ab8316cb15923323df2f7f3498a9d25e596d_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:1609be1895a5761b9d10c45ab40e767413eb778c228ad310b875416374e1068d_amd64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:225e5df6a23a80585f775d58631e590ccdff258848e1c1b0450e4ae54584ad35_arm64 as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:2f3a6019dc4f5199908b4409cc654eb51642a4ac8c0d704d9e4603286c1159fb_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-db-migration-rhel8@sha256:655c7d47b51839b319cd46769e5bb35d1ab74074cf448207dfa844c2395ad950_ppc64le as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • openshift-pipelines/pipelines-hub-ui-rhel8@sha256:0e59bbcafcaa0e7b68859603d0559cd29b4fea5d9617341bb117562e3ec26c4b_s390x as a component of OpenShift Pipelines version 1.10 for RHEL 8
  • +67 more not shown

✅ Remediation

For more information, see the Release Notes linked from the References section.

🔗 References (5)