csaf_redhat - rhsa-2023

rhsa-2023_4420

Vulnerability from csaf_redhat

Published

2023-08-01 14:38

Modified

2024-12-17 22:23

Summary

Red Hat Security Advisory: OpenShift Virtualization 4.12.5 RPMs security and bug fix update

Notes

Topic

Red Hat OpenShift Virtualization release 4.12.5 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.12.5 RPMs. Security Fix(es): * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release 4.12.5 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization 4.12.5 RPMs.\n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:4420",
        "url": "https://access.redhat.com/errata/RHSA-2023:4420"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2196027",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196027"
      },
      {
        "category": "external",
        "summary": "2227593",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2227593"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4420.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization 4.12.5 RPMs security and bug fix update",
    "tracking": {
      "current_release_date": "2024-12-17T22:23:18+00:00",
      "generator": {
        "date": "2024-12-17T22:23:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2023:4420",
      "initial_release_date": "2023-08-01T14:38:32+00:00",
      "revision_history": [
        {
          "date": "2023-08-01T14:38:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-08-01T14:38:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-17T22:23:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CNV 4.12 for RHEL 8",
                "product": {
                  "name": "CNV 4.12 for RHEL 8",
                  "product_id": "8Base-CNV-4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.12::el8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "CNV 4.12 for RHEL 7",
                "product": {
                  "name": "CNV 4.12 for RHEL 7",
                  "product_id": "7Server-CNV-4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.12::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kubevirt-0:4.12.5-1189.el8.src",
                "product": {
                  "name": "kubevirt-0:4.12.5-1189.el8.src",
                  "product_id": "kubevirt-0:4.12.5-1189.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt@4.12.5-1189.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kubevirt-0:4.12.5-1189.el7.src",
                "product": {
                  "name": "kubevirt-0:4.12.5-1189.el7.src",
                  "product_id": "kubevirt-0:4.12.5-1189.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt@4.12.5-1189.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
                "product": {
                  "name": "kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
                  "product_id": "kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt-virtctl@4.12.5-1189.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64",
                "product": {
                  "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64",
                  "product_id": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt-virtctl-redistributable@4.12.5-1189.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
                "product": {
                  "name": "kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
                  "product_id": "kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt-virtctl@4.12.5-1189.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
                "product": {
                  "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
                  "product_id": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kubevirt-virtctl-redistributable@4.12.5-1189.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-0:4.12.5-1189.el7.src as a component of CNV 4.12 for RHEL 7",
          "product_id": "7Server-CNV-4.12:kubevirt-0:4.12.5-1189.el7.src"
        },
        "product_reference": "kubevirt-0:4.12.5-1189.el7.src",
        "relates_to_product_reference": "7Server-CNV-4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-virtctl-0:4.12.5-1189.el7.x86_64 as a component of CNV 4.12 for RHEL 7",
          "product_id": "7Server-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el7.x86_64"
        },
        "product_reference": "kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
        "relates_to_product_reference": "7Server-CNV-4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64 as a component of CNV 4.12 for RHEL 7",
          "product_id": "7Server-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64"
        },
        "product_reference": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
        "relates_to_product_reference": "7Server-CNV-4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-0:4.12.5-1189.el8.src as a component of CNV 4.12 for RHEL 8",
          "product_id": "8Base-CNV-4.12:kubevirt-0:4.12.5-1189.el8.src"
        },
        "product_reference": "kubevirt-0:4.12.5-1189.el8.src",
        "relates_to_product_reference": "8Base-CNV-4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-virtctl-0:4.12.5-1189.el8.x86_64 as a component of CNV 4.12 for RHEL 8",
          "product_id": "8Base-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el8.x86_64"
        },
        "product_reference": "kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
        "relates_to_product_reference": "8Base-CNV-4.12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64 as a component of CNV 4.12 for RHEL 8",
          "product_id": "8Base-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64"
        },
        "product_reference": "kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64",
        "relates_to_product_reference": "8Base-CNV-4.12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Juho Nurminen"
          ],
          "organization": "Mattermost"
        }
      ],
      "cve": "CVE-2023-24540",
      "cwe": {
        "id": "CWE-176",
        "name": "Improper Handling of Unicode Encoding"
      },
      "discovery_date": "2023-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2196027"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: html/template: improper handling of JavaScript whitespace",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "For Red Hat Enterprise Linux,\n* Conmon uses go in unit testing, but not functionally in the package. Go is used only in test files, hence, not in the actual code, thus, conmon is not affected.\n* The Go templates in Grafana do not contain any javascript. Thus, it is not affected.\n* Ignition does not make use of html/template.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) the affected containers are behind OpenShift OAuth authentication. This restricts access to the vulnerable golang html/templates to authenticated users only, therefore the impact is low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-CNV-4.12:kubevirt-0:4.12.5-1189.el7.src",
          "7Server-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
          "7Server-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
          "8Base-CNV-4.12:kubevirt-0:4.12.5-1189.el8.src",
          "8Base-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
          "8Base-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "RHBZ#2196027",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196027"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-24540",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-24540",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/59721",
          "url": "https://go.dev/issue/59721"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU",
          "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
        }
      ],
      "release_date": "2023-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-08-01T14:38:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-CNV-4.12:kubevirt-0:4.12.5-1189.el7.src",
            "7Server-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
            "7Server-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
            "8Base-CNV-4.12:kubevirt-0:4.12.5-1189.el8.src",
            "8Base-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
            "8Base-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:4420"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "7Server-CNV-4.12:kubevirt-0:4.12.5-1189.el7.src",
            "7Server-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
            "7Server-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
            "8Base-CNV-4.12:kubevirt-0:4.12.5-1189.el8.src",
            "8Base-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
            "8Base-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-CNV-4.12:kubevirt-0:4.12.5-1189.el7.src",
            "7Server-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el7.x86_64",
            "7Server-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el7.x86_64",
            "8Base-CNV-4.12:kubevirt-0:4.12.5-1189.el8.src",
            "8Base-CNV-4.12:kubevirt-virtctl-0:4.12.5-1189.el8.x86_64",
            "8Base-CNV-4.12:kubevirt-virtctl-redistributable-0:4.12.5-1189.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang: html/template: improper handling of JavaScript whitespace"
    }
  ]
}

cve-2023-24540

Vulnerability from cvelistv5

Published

2023-05-11 15:29

Modified

2024-11-15 13:08

Severity ?

Summary

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

References

▼	URL	Tags
	https://go.dev/issue/59721
	https://go.dev/cl/491616
	https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
	https://pkg.go.dev/vuln/GO-2023-1752

Impacted products

Vendor

Product

Version

▼

Go standard library

html/template

Version: 0 ≤
Version: 1.20.0-0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-11-15T13:08:11.286Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/issue/59721"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/491616"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/vuln/GO-2023-1752"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241115-0008/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "html/template",
          "product": "html/template",
          "programRoutines": [
            {
              "name": "nextJSCtx"
            },
            {
              "name": "Template.Execute"
            },
            {
              "name": "Template.ExecuteTemplate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.19.9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.4",
              "status": "affected",
              "version": "1.20.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Juho Nurminen of Mattermost"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-74: Improper input validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-12T19:08:26.127Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/59721"
        },
        {
          "url": "https://go.dev/cl/491616"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2023-1752"
        }
      ],
      "title": "Improper handling of JavaScript whitespace in html/template"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2023-24540",
    "datePublished": "2023-05-11T15:29:31.947Z",
    "dateReserved": "2023-01-25T21:19:20.642Z",
    "dateUpdated": "2024-11-15T13:08:11.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted