RHSA-2024:4269MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Virtualization 4.12.12 Images security update

Published
July 2, 2024
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2023-45857 →

📋 Description

CVE-2023-45857 — axios: exposure of confidential data stored in cookies

🎯 Affected products44

  • CNV 4.12 for RHEL 8
  • container-native-virtualization/bridge-marker@sha256:d0dda6b19805883eb6f7fd01414d9d186469b1def94a48d2e96747d228b5386a_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cluster-network-addons-operator@sha256:727e02c8a2b8b5f3c5e0cc6080ee824c0ace3ab15c16986124a10e72ee28aad0_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cnv-containernetworking-plugins@sha256:d49c2e83ddd78029aa4fd44b34d9999d9ce9e58edd8a98fd36491263c9d21428_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/cnv-must-gather-rhel8@sha256:59ff3b1cddbb3bee6175483b3c75f22a52fb236b47b0284b468aa49e8a7f6d6f_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hco-bundle-registry@sha256:f1ed1de96a233518664503d0ed8496f4efa1a7092b4e1f20082a882b35c396fd_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-csi-driver@sha256:4b5b96b3c0444e67c4297fc4a9f9425f292b6ba685595a08c38d4483b56e8f54_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:2071baed66866393a5773b538bdca0f9c110be7c6afeb5488b3898541fbf09c5_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hostpath-provisioner-rhel8@sha256:91e35fdc8e75b64559c74b5800bf1abdc837f7ad76cbb9cde32096e0c07c4259_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hyperconverged-cluster-operator@sha256:d2dba9ae9bfc12b7997f51622011a703f1b7b0e61d9e44a276e40a4561ce8fb4_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:81b037f3a81b068300ebaf60d619543ba5629a66eb45b532fdcc8d4709a949a6_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubemacpool@sha256:54c5d446dc9ab54381ef75ae10e9114e3cca1dca2c5fa09195bf37f3cf689da3_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-console-plugin@sha256:a8b542d4876bb8b82f5a66bc0d452582b8cffb1e1d66aa2b1651612bb6041c19_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-ssp-operator@sha256:d7925a86d8b4e5f7416e3673a3841a59629ee4183da03e2002debf31744458bc_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:1779baece47a0e5816f3ee67e96ed99a67441b9ae7a3d73c50398e40c0a1baa0_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:336fea863a0a538295876cb1164d3c4c6038dd463ed38a20a97127d85f3cd004_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:57c136f41f5342dc0a20155b43435a184f4227804a436075276e38390e7ad69c_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:df422f53becac90e8a075048a2624a379c209b281d376059a5b9d1ef5d262903_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:c6644084f4584bc06e8314162090f5053d9ff2319721615407eb3e7c5415f58a_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:621f110b8c30676ed47a56089938d344a7f2708e5dc8fe168a1821af45a29959_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:b7b41226f53d95c4abf8ecd9ddac626e4df20f6d5df963bdea5f46b90c8872c6_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:68992af891953d888e87cb998ef02997b46affb6de8ba665cddaeb7c10d6651d_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:7092d7493cb6a4f4faec294119f6be312753ed4fa6cfe0ada65fa81a233da2a3_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/kubevirt-template-validator@sha256:c5427d8441f9be1fa918836af7fcab89a436c08c4f06ebdcc0f885697078ddda_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/libguestfs-tools@sha256:cd5dd79471cf8339d61d0c337c6c7aa2a067209c57495e82587534b673899f0c_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/ovs-cni-marker@sha256:3dc7177d76b55a699408f550e31b7b8a270066d029afe74f186e8516192d140b_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/ovs-cni-plugin@sha256:eb5ecafa605a4c5d20f52cb6147253660092715241def2fe64f7222afa2ab254_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-api@sha256:e90c32eb92031ee1aacc50b6dd0ffbeae817c2f55deea56a415eb98c3b727935_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-artifacts-server@sha256:ee7c3ab336f8a5617ba930610d942bfd67f39fffec6cd7a2ab95d7f2857acd87_amd64 as a component of CNV 4.12 for RHEL 8
  • container-native-virtualization/virt-cdi-apiserver@sha256:019d5b88e542f88b1429534d0bccfef3252b95b4930cb8f224694ce104a19bdd_amd64 as a component of CNV 4.12 for RHEL 8
  • +14 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)