Описание
A flaw was found in olm-operator-konflux-sample. The bundle-hack/update_bundle.sh script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving skopeo or jq commands, to fail silently and proceed with outdated or incomplete information. Consequently, this could lead to data integrity issues within the system.
Отчет
Low impact: The bundle-hack/update_bundle.sh script within olm-operator-konflux-sample lacks fail-fast shell options, which could lead to silent failures during skopeo/jq operations. This may result in the use of stale or incomplete data during bundle updates, primarily affecting the integrity of Konflux CI/CD processes rather than directly impacting the runtime security of deployed applications.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
2.6 Low
CVSS3
2.6 Low
CVSS3