RHSA-2022:5201MediumCVSS 8.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.5 security updates and bug fixes

Published
June 27, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (8)

CVE-2022-23806 →CVE-2022-24450 →CVE-2022-24785 →CVE-2022-25645 →CVE-2022-29526 →CVE-2022-29810 →CVE-2021-43565 →CVE-2022-21803 →

📋 Description

CVE-2021-43565 — golang.org/x/crypto: empty plaintext packet causes panic CVE-2022-21803 — nconf: Prototype pollution in memory store CVE-2022-23806 — golang: crypto/elliptic: IsOnCurve returns true for invalid field elements CVE-2022-24450 — nats-server: misusing the "dynamically provisioned sandbox accounts" feature authenticated user can obtain the privileges of the System account CVE-2022-24785 — Moment.js: Path traversal in moment.locale CVE-2022-25645 — dset: Prototype Pollution in dset CVE-2022-29526 — golang: syscall: faccessat checks wrong group CVE-2022-29810 — go-getter: writes SSH credentials into logfile, exposing sensitive credentials to local uses

🎯 Affected products200

  • Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:0ca1e3d45cefdf9af9a51c79c57243fc49fe737c567a55f414b1c97ac31d9266_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:68bdf38954d4ac6b34388ca970cb9005b97b6cd39835728e6e388f7ec25068dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:9475007489d4f5e38d80cd598348ecefe27a8391f9f293c4a0c3849d89209f77_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:4b2f88934832cd3b34111fc4bd2f031abf58caf46b08c3707ef8e6ac5b27e552_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:a3f035d07f965e1d994aac60c4399837748f4e91a6b854827467354a56cb7839_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:f0966b57498e55030b7e2e3d6b2a3e863c857b945fbfa38477734bca3eedd570_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:411ae15bc02db1adf7affa614577bf635badbe14c27bc578f36819edb0a418cf_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:8275318d1544a27d106415facbd77fa3a1e3836fe7251180ea268afe9a2ba7e0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:ab6901a25f1725d460e38bf9cd31de849557abed358cd571260d816ae14daaaa_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:1acfc27df12324efe0c327bc9986529c1997cfaa4f7440a9270ee2ef63fb53c1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:56693c4d5e9d2ede05ad8795a783b584942240e4f144083947f399219fabc44a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/agent-service-rhel8@sha256:fb2384d5a1c0a40bbff849ddaeebd68c68a138de677e75527a4906fe0f2df5e4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:4485c3b8985b4f94e63cc63136a6cc5498a3f713426587bfee34dc76ff03b84d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:934faceeab4360361bb152e2d552f07ce018d831e886e8c3eaf564e67192b7ee_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:a5e75de1cf0dc5b15bb0b897fe6e69878254473f7a5e1a35e9c3ac59f22e76b9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:5a97b8f0dc50289013805d918449b6331407a444c272a1c63ac126180073ad3d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:e0a7c2f97b1fecd4e6b0787b91d7848e3db568a283b99565ad2b662f65cbaef5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-image-service-rhel8@sha256:fc5cf7045bf36902555eb44da6b5a4e67a0e3460ca3c443ce213fd4965fc879f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-agent-rhel8@sha256:8cdb19fe19bcd1c36dc233c3906ae49bcd48602ec8f2f608cf81c54721c0e4df_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-reporter-rhel8@sha256:5c851f8ac750572fdb2582487e2cae3e170448686fcc0e22441fb5da5f9ddfba_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-reporter-rhel8@sha256:70afaff5fc8ff7839a27b9d8e4fe8521af94d26da97e1d6289c98f87c4222a62_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-rhel8@sha256:825449267b93c081a33a583534c2f9c1ddae99c7b2ff8e69cbac62af6a8f0b7a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/assisted-installer-rhel8@sha256:c7f3e8a5ae8ae648185b77012ba73da66a83e918684956e66ebf2b5a039f9f89_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:54496986f3d2aba9c3a443217bf79bd00a2d2a281917f75f81af91fedb3ade3d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:554440e4fc2d570da4fd7e2e8b984950cad41b3673eea136e96dc60f65d17a8f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:5b7ea13d4965c748b6f9e0f11db23f1227fe69505c67e5a558f68d108c9d6051_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:1ff6c020f4816ed4948701591a7717104278b5c1109433809610c56d422ac6a4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:829a8f9881260c8e4f2c4189425903a9cbe5545ebf559c355f1fd2c2a122b9a5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • rhacm2/cluster-backup-rhel8-operator@sha256:d06edd763075636b0cf8ad090fabf1090f75666c2da822ff27b1377f7d65e677_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on installing this update: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing Workaround: Sanitize the user-provided locale name before passing it to Moment.js.

🔗 References (28)