RHSA-2023:2083MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.5 security updates and bug fixes

Published
May 2, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2022-3841 →CVE-2022-25881 →

📋 Description

CVE-2022-3841 — RHACM: unauthenticated SSRF in console API endpoint CVE-2022-25881 — http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

🎯 Affected products192

  • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:469a803bf9e32cf216e47462365a832a20b0d998a265cec16875807fc457e104_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:bb954d350419efa9b795b3d440b17bbc48bf17ae32862786866d6cd81bea2fd1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:c999d294420aeb24a63b4da9d90491f44163be7b52465d6ac7ddfd5a1a24b401_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:e68ef8f2732b72a2d64b5d472bcf6e8b3b1f8e7204e609af91f8a9350b081a22_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:3dfe51951251004828b56ed5c5438655a27dca6185ad2b9e9bd8ef3fb1fa0c31_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:3f17df29ea47ed52664959ab19a177c3f1644e0fc08e1ff961a587d43c55704b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:67ddbb635a91b0bca3e0ae1f0398449acc2be0ab27629e952eb3237411f6abac_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:fbcdc51d1f5d697167ab407e627c01ed806b357669d4fa13abbdfd8b04cc7df8_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:ac975b8584e2706b9b161e8701915f6d9432b1daf4465ed9d1189ff44afde6fd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:b42422f55c28eeb8f5c88657cb21df0f5a4a753e8332bce9960f58c621ff6130_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:b764dd33734b1fbe91f8e25a63f7f970b04a594f9a20c0815f198e414636ca9a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:e798725820f99a02b8c97831486f2d30ac4f4efd9ce6d1492e8b43f97acc669f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:52ecbf5896a785b607de0acd86e40d600ed91e79fa67f0585d6fc2c2c1c0b25b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:5e08df5fc9547ed6ecdcb48d84a40fcb44c7a0f7f033d967417c4432215f6078_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:e5effedf877293200648cabc0457bd76620866c6d055e76d98e9041730416fc4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:2bb2bf965037efa861491f69ef9bf0ca932cfd681109396b0e8bfcc7589648a5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:8566af80d6d83a5aeebc68d2a04949165b155b284f75b6254cab0c28da7da261_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:8bfae756a690ac34eb30f15de6e412ab4cba9e7078036b2ca759851b8ffd028c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:efffad91e27fa6e6cc25b65fc562141889d5a787bf129f2fe8725b7843019a56_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:09a4006698dbe9e05a17a7f328a0b12312718c1be90adb9aaf2c3fcd134f630a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:26ca64578f0024ee4f3ff1c367c936564b7e98f30925eb2849c1c7c52e5b1578_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:6457733752a27c2395279b1f64b2092647ad9ddc2550029658a6581b71c15c2b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:fa621247b5a43d2dd153703f1771ce9c501341d4282d5ba5f431de6576ea235e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:3a82f445dd263dc09a58fe11a1b0abf9565f2e493482a54c9cb79fadfa49bc39_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:3e7c593601dbfab32fdaaa71216cdfb71735e7ba2308bc1202583e49df82df78_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:b635ef266e13df82a2065662c8466049995aabf27d7b4ee7e4a7eef5abb6a2e1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:dc6aaba1ea8f9708bdb3b5a4fb568b33cbad39900def5120d31d971daf4c54bd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:bbb6d9b2d2804ae2d98cfd0cdd649d751cfc4e445464792640fc815a5134cca9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:c1967c912fd7aecc7e2a33b6070f161183c5ad605d978345fca1254c4ebdecff_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • +162 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online

🔗 References (6)