RHSA-2023:1888: Critical: Red Hat Advanced Cluster Management 2.7.3 security fixes and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.7.3 imagesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which will be updated shortly for thisrelease, for additional details about this release:https://access.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.7/html/releasenotes/ Security fix(es) CVE-2022-25881 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability CVE-2022-3841 RHACM: unauthenticated SSRF in console API endpoint CVE-2023-29017 vm2: Sandbox Escape CVE-2023-29199 vm2: Sandbox Escape CVE-2023-30547 vm2: Sandbox Escape when exception sanitization
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1888?
The severity of RHSA-2023:1888 has not been explicitly stated in the advisory.
How do I fix RHSA-2023:1888?
To fix RHSA-2023:1888, you should update to the latest version of Red Hat Advanced Cluster Management for Kubernetes.
What systems are affected by RHSA-2023:1888?
RHSA-2023:1888 affects the Red Hat Advanced Cluster Management for Kubernetes version 2.7.3.
What are the potential risks of not addressing RHSA-2023:1888?
Not addressing RHSA-2023:1888 may expose your Kubernetes environment to security vulnerabilities.
When was RHSA-2023:1888 released?
RHSA-2023:1888 was released as part of the Red Hat security advisory process for addressing vulnerabilities.