RHSA-2022:9040: Important: Red Hat Advanced Cluster Management 2.6.3 security update

Red Hat Advanced Cluster Management for Kubernetes 2.6.3 imagesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which will be updated shortly for thisrelease, for additional details about this release:https://access.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.6/html/releasenotes/ Bugs addressed: clusters belong to global clusterset is not selected by placement when rescheduling (BZ# 2129679) RHACM 2.6.3 images (BZ# 2139085) Security fixes: CVE-2022-3517 nodejs-minimatch: ReDoS via the braceExpand function Security CVE-2022-41912 crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements