RHSA-2023:2083: Moderate: Red Hat Advanced Cluster Management 2.6.5 security updates and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.6.5 imagesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which will be updated shortly for thisrelease, for additional details about this release:https://access.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.6/html/releasenotes/ Security fix(es): CVE-2022-25881 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability CVE-2022-3841 RHACM: unauthenticated SSRF in console API endpoint Jira issues addressed: ACM-3516: ACM 2.6.5 images
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:2083?
The severity of RHSA-2023:2083 is classified as critical.
How do I fix RHSA-2023:2083?
To fix RHSA-2023:2083, update Red Hat Advanced Cluster Management for Kubernetes to version 2.6.6 or later.
What products are affected by RHSA-2023:2083?
RHSA-2023:2083 affects Red Hat Advanced Cluster Management for Kubernetes version 2.6.5.
Is there a workaround for RHSA-2023:2083?
Currently, there are no official workarounds available for RHSA-2023:2083.
When was RHSA-2023:2083 released?
RHSA-2023:2083 was released on November 9, 2023.