Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-35586

GHSA-6wvf-f2vw-3425: ose-installer-container: containers/image allows unexpected authenticated registry accesses

XMLWordPrintable

    • Critical
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • N/A
    • CVE - Common Vulnerabilities and Exposures
    • Done

      This is a clone of issue OCPBUGS-35527. The following is the description of the original issue:
      —
      This is a clone of issue OCPBUGS-34037. The following is the description of the original issue:
      —
      Open Github Security Advisory for: containers/image

      https://github.com/advisories/GHSA-6wvf-f2vw-3425

      The ARO SRE team became aware of this advisory against our installer fork. Upstream installer is also pinning a vulnerable version of containerd.

      Advisory recommends to update to versions 5.30.1

              rdossant Rafael Fonseca dos Santos
              openshift-crt-jira-prow OpenShift Prow Bot
              Gaoyun Pei Gaoyun Pei
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: