RHSA-2024:11381MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.4 security enhancements and bug fixes

Published
December 18, 2024
Last Modified
August 9, 2026

🔗 CVE IDs covered (3)

CVE-2024-45813 →CVE-2024-45296 →CVE-2024-45801 →

📋 Description

CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45801 — dompurify: XSS vulnerability via prototype pollution CVE-2024-45813 — find-my-way: ReDoS vulnerability in multiparametric routes

🎯 Affected products172

  • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:6ebbf5e1f502c8ff07866d0e5ab992dc476d92fda1a2c5f0d194964f5c8780a4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:ca6224c9ddfeef2d70a489bb5ff907dbad2b10f4a3b3160fb335871a00975dd9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:ce3751f580b06fc63ea243dc63adc35f816afe3764bca8b71f6b270120f36a72_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:e1b8fd8498675c55f4a69d34290f0b6a4179224b0f62ecd75c7847ea543bf78c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:33847b067de6419c375d34750f28793a46134e0efbe08b3486f9b2f00c87f351_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3d8bafd1cf71a7b7690b0475152c6250c3f242f14909582a6aa8ced3556357ea_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:82cfa01fe86f0e434343a7aee1ea2921602faca63ec1f541f6ecdc58f720d7dc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:bf95ac97ac597e2d4fc9e342fb02c3a5134a2459a0e2d743f922b6e6ac89dda5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:4f21cfa9dbddf65b175e07a206af71fa4237914ca6646696d9fd396ed2368249_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:97256c43d4c83e999187c6b92c1577f9e02435a69fd8ca97640dc6aa24561789_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a17e350bc191b1c9c6c11e968c3bdfd091be1cf0c814f945039e0f2be8a6670a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:bc592e11284d0d0ac1c833b5dd879a44eedf7997a7be696273ee7ff8c6df1378_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:3d341aba2e60b80c33bb807cd720dbbe6c960de5262540f8b50aaad9171e667a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:8a34dcbeb5c5833bac29096de8a12db676c430cb8abce2b9ceebd2b62f583ef5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:96bd7bf3644b6bc7ffd79ba642484a0ef6165ea9e3cce97b72d469e4a1d4f6e1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:f15deba658724b2ac1652f0aa6da36160ff3bd4806e29a8be4fd1c18a4703101_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:29d2dce23c484ea18972866a33ea9d300fecd4171e559d14807c12d4322de22c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:7f2225eb52fdaaf56a56fcfd2f991f29f9e909cf29619dd8f3fb94f1909f14fb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:806027570e1e65b75a17ef85f03071f8a6782d9d99cd09cc6267ca1dbfecc199_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:a4e5134cda97e37275802ae34d970928fa2bda9457bd711212cc4218346a56a5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:0c4f07e240f85ce34b26d9f300db78c499dedf923dee160115d54b1e149967db_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:63ee473a9947f11e7ce9136c3006fdbfd1122b317508f97839b0364d0fac4c8a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:92e05b9b0e355e54022a061fc4ff91d49e23f4161818a31f3f11b94f80a903f4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3b81472a2966658f2e43d9dcadd1c84bba39ac310ef51be0c982f918d62e9ff2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:4a619afe04c0e34a0e8e48bf3c4818dd808c42680220d0b7e9aa18a87b0f1811_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:7168b820b29421f5f53fd3fafd3e25599df9de03a6a8983422eb3663d1afe5ce_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:b54bd8975c7214ad79aaab4af6c9d14d103c47df9e43861ee7aab30c49076298_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:018e8bad4ff7269237bf471be3cc4f87d1236bc03bed3df900e4c89afd2aeb29_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:04f64f5f1cbb0723998eabdd7f84fd735da9bcbbe3eb5031d55a5b8634bcf11d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • +142 more not shown

✅ Remediation

Before applying this update, make sure all previously released erratas are relevant and have been applied to your system. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (9)