An update is now available for Red Hat OpenShift GitOps v1.11.7. Red Hat
Product Security has rated this update as having a security impact of
 Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed
 severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Errata Advisory for Red Hat OpenShift GitOps v1.11.7.

Security Fix(es):

* openshift-gitops-argocd-container: Unauthenticated Denial of Service (DoS)
 Vulnerability via /api/webhook Endpoint in Argo CD [gitops-1.11](CVE-2024-40634)
* openshift-gitops-container: Argo CD web terminal session doesn't expire
 [gitops-1.11](CVE-2023-40025)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
 listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-40025: Insufficient Session Expiration (CWE-613)
CVE-2024-40634: Uncontrolled Resource Consumption (CWE-400)