RHSA-2022:1476MediumCVSS 8.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes

Published
April 21, 2022
Last Modified
August 22, 2026

🔗 CVE IDs covered (12)

CVE-2022-0144 →CVE-2022-0155 →CVE-2022-0235 →CVE-2022-0778 →CVE-2022-24450 →CVE-2022-24778 →CVE-2022-27191 →CVE-2021-23518 →CVE-2021-23566 →CVE-2021-41190 →CVE-2021-43565 →CVE-2022-0536 →

📋 Description

CVE-2021-23518 — cached-path-relative: Prototype Pollution via the cache variable CVE-2021-23566 — nanoid: Information disclosure via valueOf() function CVE-2021-41190 — opencontainers: OCI manifest and index parsing confusion CVE-2021-43565 — golang.org/x/crypto: empty plaintext packet causes panic CVE-2022-0144 — nodejs-shelljs: improper privilege management CVE-2022-0155 — follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor CVE-2022-0235 — node-fetch: exposure of sensitive information to an unauthorized actor CVE-2022-0536 — follow-redirects: Exposure of Sensitive Information via Authorization Header leak CVE-2022-0778 — openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVE-2022-24450 — nats-server: misusing the "dynamically provisioned sandbox accounts" feature authenticated user can obtain the privileges of the System account CVE-2022-24778 — imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path CVE-2022-27191 — golang: crash in a golang.org/x/crypto/ssh server

🎯 Affected products200

  • Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:73db676a95355a236c35d5644651b25cc61374b51079fc008bc4a926e331d5b5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:8dc16b0e360c75292e7d61aea44f18e92a548892dbc72ef06b27ce0bc3594268_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:90fdb430e9d4043d73aa78c202762af6b1ab7d3b0f4c282f950db87edea50f17_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:50fae1bb75171943ad9b2af611e351ad9956b5482b0c6842a471e7d4668d88c6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:92b51965bc246b512f0c1c79cb1136944a0eccf35b55765cbc1265fef26249d5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:fbe5128aa8d35cb551f77f87651d8d50c8829921fa61753fd2108afeabd6f0b3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:347d59a3bd120f1bde3b8a2dcb654b0bc202cb8613bd2420dbdb9206401318ba_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:bf42a58a00016ca3d24aaa5a974d5c435d7b889c3feddef6742fd13c4cc43156_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:d74ab2ab74f610d21549987635562b265487e299fd8a6cde5f6137337f4eb119_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:11711112cda7e48c5265a4af56ea4e89e06ef9170380713eb2628256b8e86554_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:15c2946d38c93ea386b322b0dc0156e86ba7c515bb945ebbc0a41998e884adec_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:a515389525f187ca6b807386f676b8c881dda2914bb7a3ca42d3110ae9c36308_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:9e821845c2bce35b2f9861d4e152b7b275d6116ac7328304266560e5e0e44f1c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:a770112e5db1ca608251a863088a6b8dfcd275f62b38761807138864536ff827_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:b83e303973b491ee4094bb3443dcff34fc02691674592f49dec9b2a595946b8c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:2bd413e6a88e30e10d260c3ac4160cb2e5e10b87da3847e420aca5b88cca94bd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:8a6f66becb7fcff09ed0d06b10b521311103548488c2cf6e1d345f61f9379ba6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:fdf1998cb87ee949089687b7fa7242bd3ec63d63be170a60c66920fcade58f21_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-agent-rhel8@sha256:2114a45e1e27718f012b6d269cef03214d0fab6202fa02a89e6e30a7b4b4413e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-reporter-rhel8@sha256:071132b4ea955666bee08b95aeb1175b8e95c6ddabf83d6cfa861e4f20ecc5b9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-reporter-rhel8@sha256:20c8405728ff2c03c0c574724abf786a441d3c8fe971b3c4badbc61f7f134364_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-rhel8@sha256:9fca1e906bd7d054903eb4555388e88ff1a48a4718fb9ad9623ab207ad57e328_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-rhel8@sha256:e95f06b8102850f994077f7d1696742dedf987457efb1023255bfc76ddfe7e82_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:6cc8abf04902c77570d6eb3234c20d2b047d285151db883126ff6af06954e781_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:839dbf4732f782bf82096310e30a4831644d777463479481b634165943e14854_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:94a9947f0ad961ff63a78367b732558183d06c39d1c6b265627a5f2e7730536f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:5312c9b8a95a3a3095d711af08e465697dfcc9582ec1eaad380cea79a77c6353_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:8140c1909722c7b0a7952fa3a35cc828efac177932dca367a80bced752bc3884_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:999ab5e779d6aabc3307d67acb88e89954604443c63be373e33fb50259e06faa_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.4/html/release_notes/index For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.4/html-single/install/index#installing Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (30)