CVE-2026-87061
Description
A flaw was found in olm-operator-konflux-sample. The bundle-hack/update_bundle.sh script lacks mechanisms to stop execution immediately upon encountering an error. This oversight allows critical data processing steps, such as those involving skopeo or jq commands, to fail silently and proceed with outdated or incomplete information. Consequently, this could lead to data integrity issues within the system.
Statement
Low impact: The bundle-hack/update_bundle.sh script within olm-operator-konflux-sample lacks fail-fast shell options, which could lead to silent failures during skopeo/jq operations. This may result in the use of stale or incomplete data during bundle updates, primarily affecting the integrity of Konflux CI/CD processes rather than directly impacting the runtime security of deployed applications.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: Unexpected State; DoS: Crash, Exit, or Restart
An unexpected return value could place the system in a state that could lead to a crash or other unintended behaviors.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
