RHSA-2024:5314MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Virtualization 4.13.10 Images security update

Published
August 13, 2024
Last Modified
November 7, 2026

🔗 CVE IDs covered (1)

CVE-2023-45857 →

📋 Description

CVE-2023-45857 — axios: exposure of confidential data stored in cookies

🎯 Affected products93

  • CNV 4.13 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:0a4a376ff222bed50e22b8c6bbb19955f40f5e88173afb81f3e112b4765dc85f_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/bridge-marker-rhel9@sha256:47fbeacd6f703081e17c0eefee625547327dde0854ac4e0480b4ca8f240b526f_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:17f37cd7c6d6c934e3518c9564b108cca206fbb807fba811e7d9d80bdd6759b0_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e6297f16f14b2e3b132d978cad18ca874fbf222dfa2f99083111567d7abe8511_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:867c5f6587b16dd518c38f29cee59ac9e397739a4696b0abedb14c1c11f013b2_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:a526f4badf53c0153236a3d2bdf4da1d9dc90f170e474afcb90a365c9cc8a1fb_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:c6f48f9f7eaa004f191ac2082bd714d32ba54b0647955096dac4148c7ada81a7_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/cnv-must-gather-rhel9@sha256:ed85e0ff0d879079f00ac4db8ef6bb6442a0c203892747cb0cf16e4829102f36_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:c5d3a50d4e3e303a21543f60aaadc518b163bdc11ce966ffefa90ed03b93d8df_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hco-bundle-registry-rhel9@sha256:fc767db1f924404f58d3f53786b06aec5c64ba2a9210a172f649930bc386df6e_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:68fb3046f530fe9b56176e8859d05ea730532c5bfca6f9c2f75daf62e72e8303_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-csi-driver-rhel9@sha256:d381b3acd1c20e8e9add194266645677659292ce83a6f73f5912f60741b4e13a_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:706c5f30be8be9362df2e2f96f1d5924dcf4c91a406fbad783cd8c51a7e4733e_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:b8db87159c14e4e11c53df4a1b9ecfa1dfac211a06ca1f8338f55aa765c1b4b1_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:5dbd2dc3ccd0b252cbb8a1b09fa3cb0ceda1795001f9d2912ba6aba74a7db3b9_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hostpath-provisioner-rhel9@sha256:ecfb66e2731c27b564a6a5700a70410a029b078505089320126b405fe1da57bb_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:512d79c4f3f12d0a613c152a2a4d2b97abaffebaeb4b43f7bded5cc81ff6f42d_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:7dbbd018f0f380eca54035fef8b528893bcf0fcb7bff21fc7b69a0311ed25c0e_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:1035446fa52630a6bdf80fe3ef00d9a9bd854ea03f69cb40e66a2513346b337d_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:7be61a84776a9c45fe6e1e023befe9dffaa9f9a6ab321eae907261b69e52e704_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:436d340bf1aaf6ea8d61224d4c4efdd81170fc9621777b63567ccb4f43514f2b_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubemacpool-rhel9@sha256:bad56e671cf0e8989ebdb03990e8bdf8cfd0a9c5d8ad59b345a2e4054af9872c_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:6ed0f7a37463bf4b04ff1aa1179ba15a162e89632e95fd7c9568e66b0713c097_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubesecondarydns-rhel9@sha256:9b6778c58ca9eca586c22d37089bca6e300efdc136a67062b9229583974cffe4_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:22129b7ccb8d2a61c1e88904163f5788a2c8d4b1f7e7f113db84ded01110099b_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:7ec58c7b5e472562812bbfbc670c8125d3df564407c98e09520f919b47944148_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:09f10484a4ccf604bbb7b227574a06a2d1ef8867ac0f738d86e7fa396592ad8a_amd64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:2d26d1e33adc1fbb36b92583c985fc2a5e6baacba638b0b0387ac227dfbe2ed6_arm64 as a component of CNV 4.13 for RHEL 9
  • container-native-virtualization/kubevirt-ssp-operator-rhel9@sha256:da4172696f5ba0f1ce25a1a9937db7eaa8d40711d4378ff30349869f92800626_arm64 as a component of CNV 4.13 for RHEL 9
  • +63 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)