RHSA-2022:7313MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.2 security update and bug fixes

Published
November 2, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2022-25896 →CVE-2022-31129 →CVE-2022-2238 →CVE-2022-25858 →CVE-2022-25887 →

📋 Description

CVE-2022-2238 — search-api: SQL injection leads to remote denial of service CVE-2022-25858 — terser: insecure use of regular expressions leads to ReDoS CVE-2022-25887 — sanitize-html: insecure global regular expression replacement logic may lead to ReDoS CVE-2022-25896 — passport: incorrect session regeneration CVE-2022-31129 — moment: inefficient parsing algorithm resulting in DoS

🎯 Affected products193

  • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:24867997344151f0a71116f5bb52f4afbc4d33dc4333283e9abbbb92fb060b8d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:75f75a8df153582865b4463d28ace52d063ef7b9bb0b69fb3f917e17c0fe2fad_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:9dd7b1335fce4f5a03b8e425bb9990299dfe4b8204c4710df048f43df02d5a1e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:edb685810550793e4305afafa747a9195032be835dec3284add7129adf55cabb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:259617d9028e93b7e57ed47b51f0314744a123dad516e62ad68af91beaec57ae_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:b926926c9d3343d16d3945bdfab41842fc11b6c58eb2fbaaf53b02420c7b3d23_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:c694411dd268ba6864ee2204dcc941af17fa56baa1ba2d856c25974a53d98f2a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:d5670862ad0ad01c7b1446381a02d112c80bf3b714392a938d05fb4981c40598_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:206442cf3e5b9609792859160b1948b69f7d3f4e9da7ad8b2f470e3796a77a06_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:2e81bbe652bdfbb3e3e2cf0f8a8f30558d4f9150744813a0706c0d2e3efbc5b2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:8cc71196bbda56a06a87e9f34c0540891744b4408ee8250fd56bdc734b173c1a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:b0235a7a5abff5d1f698eadc79a2306863b2fb45fe48bd33c7aeff158261687f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:12a06b081a8cdea335f7388112994ef912e18a54110da80fb56c728164666609_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:1a13a09057399dba15b6c1cdeac3736166118d84a2abfdbf51c6ff110b3f3db2_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:cbe87239081681d5f8deb8600ef2a1081b21b169f646bded7d9a0ae40c4638c9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:fa85d1b766139c3a81d99c3610220d6d256e8ad6be5aaf38e6a3c4ebe9bd4fa7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:36f8bd729d0cc59d1f63a610fc5baa824d6fad971cf2902c663059aba2a2f924_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:af1bebc2990011d87272fc66ca9ac66445b590c974a13b699fc375be00a7303e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:c7a8ff2bbbbf8dc2db16461ed6f38a4dd7fa3fc7f67d814f0d21081356987c93_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f2a53040b14aed57d2343f2cf194cb11d5e608785dfdab44fce4a451a0125a11_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:1a875a1ac7d8fea967286ebac6051455a9c650bf838742b392e375128b972a31_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:2bfebab46ca047e64a5c1e2bc3d996f898a3663d8dc2ade6888f7a4761757f67_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:5391c6c232e1e6ca30861ac8074dda3886d20320b5eb8896c184edd5ea908a7b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:6bfdb670877ea0329591d957da7ad8548fd063eadd55bffa63ff246b7b7bdd8d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:15b11fb949e87de8fd76f60464ebdc3450da94c31122d934de9e343de733b8a4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:216892dd9244e0681aeb45532f2648c19727f32f92910e24c0c8a07672eccc2f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:36f8aabed4c001ad706d8e4900a2cb2a409cf78a3a594d8281cc7dc2b74021fe_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:fc445d96351ac646ab3ff3e0ba5ef32c5e90ceb8e5cc1b133d5075b20e8f3f19_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:77f5b771a84faf438de7907d5347f2abe826ceb97566059a08b99fe3ec96db88_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • +163 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions on installing this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html-single/install/index#installing Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (11)