RHSA-2023:0630: Important: Red Hat Advanced Cluster Management 2.7.0 security and bug fix updates
Red Hat Advanced Cluster Management for Kubernetes 2.7.0 imagesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which will be updated shortly for thisrelease, for additional details about this release:https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.7/html/release_notes/ Security updates: CVE-2022-41912 crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements CVE-2023-22467 luxon: Inefficient regular expression complexity in luxon.js CVE-2022-3517 nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-30629 golang: crypto/tls: session tickets lack random ticket_age_add Bug addressed: ACM 2.7 images (BZ# 2116459)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0630?
The severity of RHSA-2023:0630 is classified based on the impact and exploitability of the vulnerabilities addressed in the advisory.
How do I fix RHSA-2023:0630?
To fix RHSA-2023:0630, ensure you update to the patched version of the Red Hat Advanced Cluster Management for Kubernetes as recommended in the advisory.
What versions of Red Hat Advanced Cluster Management for Kubernetes are affected by RHSA-2023:0630?
RHSA-2023:0630 affects Red Hat Advanced Cluster Management for Kubernetes version 2.7.0.
Is RHSA-2023:0630 relevant for my Kubernetes deployment?
If you are using Red Hat Advanced Cluster Management for Kubernetes version 2.7.0, then RHSA-2023:0630 is relevant to your deployment.
What types of vulnerabilities are addressed in RHSA-2023:0630?
RHSA-2023:0630 addresses vulnerabilities that can pose security risks and impact system reliability within the Kubernetes environment.