RHSA-2023:2104MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.8 security updates and bug fixes

Published
May 3, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-25881 →

📋 Description

CVE-2022-25881 — http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

🎯 Affected products200

  • Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:42026bfa5539615a6c17d07a02f86c1dcf2dae850fb83f813527545240338148_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:79faff8ac18214edb139b4016afbf801ed922c6fe018309128d088ac75c869b7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:ae6560072188b106a05bcb0cb0b30c8cdd5fd0c9b09b689a6c5ed0bcec555a15_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-cluster-proxy-rhel8@sha256:c3153f927005f6370671a11909983393037a79fb4db7feee689474109dc7fc78_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:12f96d091141a222cf30155e1bf0f2602af874877fe079d2b0d3c03a8c923db9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:17fcb839bbcb7c25cbe66a6c19dd48252ac0a03cf6335201407d111bf6b5015b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:4780cf81b07b6a003804fd780dfe9cafa3ba8d3f27083095e9ea68ef7827613c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:7fb67d35bad7f0c7f9ab5f2de9bcb7d78f5482207a986b982ad1120fb2c359f6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:27a794307bbf4e9dbb593f2f118304ec0adab0b4e2f2cebe352a830d8f8164c5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:b2cf4eae8410b345ab5222673e73985854ad6a1684c0f0e41d5913d0cb697081_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:d246af9d90b8fd808763baf870a9ac1665bf04e5e0c8ac442e51e6be50a2a9c8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:d936283544611591dd94849e3bf9c3c44b8415992e62ce732b8f3c347d3166f6_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:12ad5b3157e7702a0b05effd000978e8ad277b45aa6fc06b726e01e1142cd354_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:5eea4e889a403d1e9530980eaa0a973c1453c24fda8ada59957bbc4f20757551_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:b1eb1a70b514f725f926648ad0c39d1305653941db2a452c0ffc351ac0438531_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:d70951cdff2f6c5781d39bb30190048b6a32b75c2c1d3b7db308574e578cd7d1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:8d21655a022072564d48ab764b5da765c9b1dd0a84f76ac4875cbde944c04747_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:95dc381e453cd2201b460cd5096de0f4d061e9fc9a6b6b4e4c4d283ec57e9286_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:b46e6e7b2b79f0bfc292df064ed34d4efeada493b0ce770403c7cbdf3bb44662_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:1630964477b19fcf69f8eafdb83a39c8588a324819ffa415908a1de31f9fff2b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:4be1d5580dc2dd49b2f94c0c57e2de081ee54507cd1f422e9eb7a4126f6a36c3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:a6f16ef252a256fbadebfbd01b70bbf748e82179285602f1f1735b0933bb67d4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:b07234d4c68754696040d68aac03a11d6303d6a2d7358e1213a492f3e25b92bf_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:1e11a1e52ab4a696df5ae1403a9a6539cc94931e486d575f28f35c6ad1202428_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:7a3cccfe7a1a7b57d6aa1b3576e87134585db2f41bfff9b4b50fa54391ad8888_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:c8213633b8e670bf33b22ca87c8a309558ce4740b709847174c2ab366df324b0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:f4e06e80479dccae5cd97069a50623ec388df93f563191fe6159f3f813aa84db_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:8a721e578b78b6e56f92a9ddabebe1843b50492bdc9e42d00c757e8d239d9dbb_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:9fa12720e772f7e8e101943742e0927d35cbb112ab1268a58faf3f73fbb0ea50_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release, for important instructions about installing this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing

🔗 References (5)