RHBA-2024:1793MediumCVSS 5.3

Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.10.1 bug fix advisory

Published
April 11, 2024
Last Modified
August 18, 2026

🔗 CVE IDs covered (2)

CVE-2024-21501 →CVE-2024-28176 →

📋 Description

CVE-2024-21501 — sanitize-html: Information Exposure when used on the backend CVE-2024-28176 — jose: resource exhaustion

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:1d18af41a16d28a22084f8a5492e53d8f5616be91eb7a96c8d88fba309d15483_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:6b747f1d4c99ca760579ed94aafd486b19f288208358d308faf76d8d4438bbd6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:86e4ff52dc78acee514e4ff78dff99a2989fac65d8779a658f4a836521f3cec3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:9b35512665063b589601b21528064bfe46c77df3a2789fd46e95c382a4ed7885_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:39aca6542ca2c4b127809558937df283a444b5baba1bd16469bc1c3141b52ef8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:7dee60ef6d1c5b1058aeac56fb67ebb50cef4a8b97cf052d76da54bb9d63cc13_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:84280c128f8150db3694f13408ca47847a095074ca3eb7dff1c28d5b6fc36866_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:aa69352958737122c10d953d292695e9986e34c277e3533708e69c7131ff5bd4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:00970647a0e9245e4549fcc9c00212b3829b29d3eb120d3505489687dc2b275d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:4491a34daea77477043d409af2d8aea81e4fed5db15eaa2cb3581512b7be3276_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:81472df9ebf4f4955fdea6776d82d7cb3848cdd1a32ce09b2319f762099d5804_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:ff138b2f93c1857fd3c3ce40e7edcd698a419a832250e0034784f3b51e3265e5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:14bedfeb5955d2abaa6319f8eca917e8c8ee127cdf23dde5ecc65c2b139b1d83_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:23f474e7dd7534d7273369f2e0cb69faa82e4ff5335fb81062755f571ddcc54b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:a69814678da6d23c3b29852909d8e13e6e14d722e8203be53899fc334767c834_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:e4433009adccdd25eaf9e0d62c1379ce0cb33290ca1ee4bf3112429b3571bbf4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:3e7013ad4d10ad536b3f980a69c03489026dc37db0bbbf690552509910930dc2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:5a60ebc8c33c1cf0091cb307d1eb752e6e3a2b3607d1e92520e41ac49a08471e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:c785a1a8ede0a78846ef722251ccaa76ef4a171cb0d693f6185dabe33f892c07_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:caf9dfc675532706d79dab229032e08ddc1a4290854bb668f5e51b063ea3e9d0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:4088608161e506993bce92d4a9a65358c301a3242bd8150f49fe5ba1a9d45f47_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:c3f1f2ec4204c2ba372af3f2dd3ae6c31a11077ef0542bc41c5022c114af2b25_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:c3fdf3a5dc66bff5cd6b7fb7a3e5903a40d284e65c0c26ddfa3f1447b2a72196_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:256b204f8fdfc7474f2a49858a7cee71ee20828bd0185d40a655fdb1ef3beb94_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:9fb4950b0fbf67e274f39db6cf3fd4e8e9f80cddf0911a3ff86281cfc1612a4d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:cce09524cd3916f602f701929739d467db4170ca593bbad672f9bab4073ed4f2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:d1d1baa2b85a799d54dbbf7348d100291de6ea84d1ef0ed460e78f3d5d5cdcb9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:01f4cd86c910e1cbd2fe79bf340f11417274d4bf40311d36f8f55a54c72df721_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:65e9f71f74b7ba28fcdacd38f02de938d853c4f61a69824f955ff2c231b467fc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • +146 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html-single/install/index#installing Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (3)