RHSA-2022:6370MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes

Published
September 6, 2022
Last Modified
September 30, 2026

🔗 CVE IDs covered (11)

CVE-2022-32148 →CVE-2022-1962 →CVE-2022-28131 →CVE-2022-30629 →CVE-2022-30630 →CVE-2022-30631 →CVE-2022-30635 →CVE-2022-1705 →CVE-2022-30632 →CVE-2022-30633 →CVE-2022-31129 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-28131 — golang: encoding/xml: stack exhaustion in Decoder.Skip CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30633 — golang: encoding/xml: stack exhaustion in Unmarshal CVE-2022-30635 — golang: encoding/gob: stack exhaustion in Decoder.Decode CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products193

  • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:615ab5d9542759d921634737709e84a8e65d003ea136e5d22858d380225fd177_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:958b729d30f10b9c121e68ac8ede2054ed29cc52a9a7d6df0537ed221aa74358_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:b5bef941b4e0b5b3529ca5b2311c85295b9f6d12e482a9cbdad691c2406541f1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:f6194b9056d77e54f3c74caa9eab87bd1df1818d082fc807229d1c44ec6c88c4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:45616ed43b53d3a83e65828118f09430396f5bcb0566ae3a65d937b59f0d873e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:8c48441cfa850ea1274932e94da0831618c10f91022619c779304501a75fb161_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:cc1c196b19c5fd8f313c6136359cc9dd37b5f59d32a581b10cf89b80b7d0cbf4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:cdf24e68e50be1350566243f6d2cb1403d09ab68e5fed39ea6c56212e42b90f1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:1457ff5cfd61611fdc968d4af5b020d835e107b97932c7ba7b3f5ed4cbd0e39f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:39842906b3846418bc31098e2abad08210118d86aa683e9e5fd04a97822df22d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:8a69add2d90a1e094de8510052b683e1765153da75e316ad7778499af0c5ddf9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:dca91134a2c1c33c736afcd4c9373749448641385f39162c74e115691289e843_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:0eac6124f59492d09c1ae650025d59ea0e8547d9f9c832cb9607b09254ff6ddd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:1cbcd58a4c23e4c89a6a0509f78802a5aa21205db2784ebc9772b99a3917b183_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:997aaee36f0bed47e231925a3f2c2ecc503410e54b35727f035c72477f3d1944_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:ce699187f250b93976b8063228ac12d11c6c8f6baba69ba4ed17a38730e84eb3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:693a77a9324d6c7f0e69bd9d5725b51f3e429972f1e67469e93648cb347eae84_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:89757e804d5df2b5eeeb1191b599c3acb9e75f61170f888095302830d6de0582_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:8e45e1fd7342d7525b118f01794cac1f4a8662def5f2a06336b698db2e268742_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:ce1c17b34b7aac2e990dc0efe40f4406e73f727b2c7bfe109eded849de753f1a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:728606d96dd9e0fc2e7810e092e10ee071ec36598c990c8252beccace59a679e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:b457d0b95d88c5dd0aac87492cbca40a9d7c2074002ad110f52d562f0c5d0797_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:f34d2569033bfb1d173342264f090f46d80f7843d52704a7ce9e9eb9de2f5abb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:f720e0a94bfe7ed5d812819a3e77cc0581be102970127d8c0d4aa06a05edbf3d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:17ccd6b924b36ab14e3ca5f5331ba7e4c86f8cb64304640d58c3ee6b76edbcaf_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:27079308ea87e35564cc3089c65eae68d63880a3bb093ca64d1678a68b60fcec_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:9eabaac2df91aeef613d6973669d07298f2159c6a6e0c9f294623f7b1a10bc08_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:f7abdf1756bc0ff2ebf02fee0469a8b9eeabe1fa8cafdd21c6e8f958155b70bb_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:017c1e663827a3b55d70badd3ed979b5d1831252c49d671897a85a75afaa5bb0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • +163 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on installing this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html-single/install/index#installing

🔗 References (68)