Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: None
Affects Version/s: 4.12.z, 4.16.z
Component/s: OLM / Registry
Labels:
- CVE-2024-41110
- triaged

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
None
Regression:
No

Target Backport Versions:
None
Target Version:
None
Release Blocker:
Rejected
Sprint:
Glaceon OLM Sprint 267
sprint_count:
1

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:

IBM has identified a CVE inside quay.io/operator-framework/olm on the upstream repository https://github.com/operator-framework/operator-lifecycle-manager using Aquascan.

GitHub Issue: https://github.com/operator-framework/operator-lifecycle-manager/issues/3418

Red Hat CVE: https://access.redhat.com/security/cve/cve-2024-41110

Version-Release number of selected component (if applicable):

v0.28.0

How reproducible:

N/A

Steps to Reproduce:

N/A

Actual results:

The image contains the CVE.

Expected results:

The image does not contain the CVE.

Additional info:

Assignee:: Catherine Chan-Tse

Reporter:: Tyler Cloud

Need Info From:: None

Contributors:: None

QA Contact:: bruno andrade

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Created:: 2024/10/24 9:42 PM

Updated:: 2025/07/19 1:29 PM

Resolved:: 2025/02/14 5:21 PM