RHSA-2024:3473MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Virtualization 4.14.6 Images security update

Published
May 29, 2024
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2023-45857 →

📋 Description

CVE-2023-45857 — axios: exposure of confidential data stored in cookies

🎯 Affected products89

  • CNV 4.14 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:4227bfb6100fcec336ea1a8034f1aecb0861d07d26ebf9487a4a145a9df50b53_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:639585e4679ac391d08650b9400bc4b60aec11c6ffaee475733b689ea8e4cadc_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:19bde57fb40cbdbae89a3607752d52b0066f5be773206014c8355c1212162229_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:775f9b9ad0ae569a9140e4a7a05c22b184573b5b463036dbc86fd4f2c4a25c78_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:00d566b33cf6ed77bbcb7799bcedc027fc27325a2c9bcba0b570e43567154d6e_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:e3939de05b6da8e0abe8f563f4fd6539d8609e660c42c8838c7ee12dae6ed372_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:51b9251dab6504df1b278dc5189ea62512d13c107233d2008c584fe43ef4fa2d_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:e38828943ceff82ace62760df8cb76b8f54201d335bcf20c8a401ba51aee9790_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:1381ecaed442162e985372cfc07d8189fbe3cef4a32f801d6838c1d9c669b1e2_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:74a9c0ab80a851f5784e2a6e5d4a51b9f43e2d2c7e8efc732b19b72b2e6352a7_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:363a3e53ff526890421817fc89f57e2e3a8f4ee3c40d937c0bbab519973b4079_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:c0b66babecdd830e944e991f331bafb104cc5c203028a12088004dd8eeb0c8d9_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:1c6d9c60ec73a64433dcdd1675d0e4cc8a5fc90ea908329b8afe1b2d8782a411_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:f7fe1178a205441b0642baca5d9c6a26d8dcf2f515930cfa6ee5975ca14b3a48_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:0a51c4d032a032f5bb27249dd3eed8f20e09301740d4b69020d8803eb40f840b_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:13c4e9e02600414484fb7a231597256e90fbd587b71d836771b7a794c4bf8d62_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:437cc3bbab2422e7419f786621e7a2098168b81c7fb96513b105ded0e12ceaff_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:a9d8563a8b104ee29a860d788dc2c2d9a8cc74255261d93bd7fe4e92d3b03fe6_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:7433a3efdf8cacdac903228815f33f5cc4bee706b1328ab9635e206474199e6f_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:ea09a1a79fff02ca0ce74433384e338c3674bda72d40403a2e7bb6145b3f0ecb_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:93efe34fb309b9d9d1b36f167976baf65a297b0b8a6d32ce67160889dc4ad733_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:ccac3c377544f9bc8c89a1260bf24b9ee8d4d2d0c857a76188db556831a856bb_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:2cae124766b49ee4e07a83c7d0929279e4161301dbc0bdeb0cd1932e35ecd24a_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:dde5f89908f70c742e9461cf19d98b1482834eb2b3dad3f5b838df5054b39181_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:177d2a0a12b6c6fe5d261d524bc9c09760099f959edcffae7d8bc925f170db8f_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:4308ce352c73fb1f0df923a57f4b949ea97e940310694a7e7b569e217bef6fbb_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:0e6f4edef8b0ccecb3f638f664febe5443e5281c1b6b79894215e67240cfac46_amd64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:e2fedd04de0acf0bd947d69709bdbe6e726bccbdd74fa9619a7ae553add22a52_arm64 as a component of CNV 4.14 for RHEL 9
  • container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:6c21c65dc271f36d9215c31976a35d66f66b7902170347ae0097a1060522845e_arm64 as a component of CNV 4.14 for RHEL 9
  • +59 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)