RHSA-2024:8974HighCVSS 8.2

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.0 security and bug fixes

Published
November 6, 2024
Last Modified
August 16, 2026

🔗 CVE IDs covered (4)

CVE-2023-37788 →CVE-2024-1442 →CVE-2024-28180 →CVE-2024-48949 →

📋 Description

CVE-2023-37788 — goproxy: Denial of service (DoS) via unspecified vectors. CVE-2024-1442 — grafana: Improper priviledge managent for users with data source permissions CVE-2024-28180 — jose-go: improper handling of highly compressed data CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products184

  • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:2f6fb5965fa8e55170f14dd8dc3abc6d137cd238e17edac4ccd5abd60187eef3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:47c75fdc2f385033eabe14a8a77ec914a5b51ff96aac6ca574ca8a53e2b63e52_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:98482f958f0d1fa93588580555bbd25800328f95c797a3ef93a658c7e5ad0e59_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:d838f308f98f3e258816625072fa12d8f42b6326c16f156201091146efc310f2_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:706641d2dd16b93afde89902f17dfb16d0e1cf3f7a973a3e7aac3550d1465394_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:9a9d5d5816c17f52c72af67da79cb575bdab8aceb62777a961673cce87bef92f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:eb898fb61f87fa271f0b2c77074dbb4f7916e1098bd32f76d556e8f354b541b2_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:f9b92146208dd4a6a6996cea0209abed167116a0a97040bfdb0d8c2b2b89231c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:0359f1ea3ed26567a446c34137135eb449455aae9b10b7eae887dde872afe08a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3dfef4b33d70b269c82ecdc27f534651c4dcff970af425df22916cb13540a7ef_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:51ff11e7a579c51626eebc282e86195eabf2a8367c2db70c636b52b95b45504e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:aa024db44370a35bf9a06477e930904794c021e381f4e547aea6d042379cc94a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:0a11ae6f16b3dd98e56f15bbbcf76e77849b95c4290123b54b2770c9ef9f6650_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:5c933f7b880987856f325079dbb9241b9eb514c7a92f873987190cc839f920e5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:bd5a08117c777bbd01f69485ea8e163cad0658f33249dd7019bb3fb3c072aa02_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:e27c4e2a19c860cf2b2ccbc35d3f8cac438a12a10c2f689416d4ef769e1a5394_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:1ee2ff945acbbf4e2858415dee6fe18008fe953c48950f9adcaa2a11c97a4a4d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:46b9a7aafb393eede1623a9c807648773763dc79257a843d24e1c6068d2440fe_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:473be8f6553180e205ffbf47561bdd49cff6d8154006ca732c63d5a7d88f308b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:c9707f02699264f9576a429610d554763c40d473ed15edd94cb697a74a3a504f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:3ee4cc0255cc23444afdfe9a5bf15566dd6cfff69574e019a9b4a07b6e5819ea_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:74ea2b8eef88e4df525d9d15e819321930c3eca1f47b3a5a510dd5dc1c429f19_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:c8428143325d7d98cce1ce677c12573e36f36fe5c623eb7c1273627616f6cb32_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:d7cca8b2cf21b77b3780768ecdbe559e70ab4f712e6dd03ae6633bc83e89573f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:061062127296c7ad45a5ef6edaaac4964831342525c527dbaca0c8d84cb9bcf0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:8eb773b87954d4bcd2ee1785fbf4230609255563a56d5520511ca1b897207f91_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:9d6b3990bee79682ab195f59c7da44e010fd2fd6bb098bd3bb70d183b61b7892_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:c2284ebd1379227e3c19b77da35bf97aa3b0a7a2dd81eff1348a9957f09e0ec9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:0139b657d9413b4ce4e52c0b3287cd2d1a0ac88716d007e6e2efa3a7f5cff54e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • +154 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/install/installing Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)