Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-1951

Update base images to fix OpenSSL issue

    XMLWordPrintable

Details

    • False
    • None
    • False
    • Hide
      v1.3.8 OCP: 4.6
      Fixed issues:
      Update base images to the latest version to avoid OpenSSL flaw (CVE-2022-0778)
      Note:
      Switch to gitops-1.3 channel to install v1.3.8 and receive further updates to v1.3.z during its support time frame.
      Show
      v1.3.8 OCP: 4.6 Fixed issues: Update base images to the latest version to avoid OpenSSL flaw (CVE-2022-0778) Note: Switch to gitops-1.3 channel to install v1.3.8 and receive further updates to v1.3.z during its support time frame.

    Description

      A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied certificate may be subject to a denial of service attack. For more information: https://access.redhat.com/security/cve/CVE-2022-0778

      The flaw is in the version of "ubi-minimal" and "httpd-24-rhel7" base images we are using for OpenShift GitOps v1.4.5 and v1.3.6. Update the base images to the latest version in order to overcome the OpenSSL issue.

       

       

       

       

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. GITOPS-1943 Update base images to fix OpenSSL issue

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              cbanavik Chetan Banavikalmutt
              cbanavik Chetan Banavikalmutt
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: