RHSA-2023:3415HighCVSS 8.1

Red Hat Security Advisory: ACS 4.0 enhancement and security update

Published
May 31, 2023
Last Modified
September 7, 2026

🔗 CVE IDs covered (3)

CVE-2023-24539 →CVE-2023-24540 →CVE-2023-29400 →

📋 Description

CVE-2023-24539 — golang: html/template: improper sanitization of CSS values CVE-2023-24540 — golang: html/template: improper handling of JavaScript whitespace CVE-2023-29400 — golang: html/template: improper handling of empty HTML attributes

🎯 Affected products34

  • RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:565a01da99320c02437b0bbdaffa35bc8036f09acfcb11410c8222df2a9ac0f2_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:9b03aca946f78e31e1a4e0536ac5c5871df33ce1d73bde19e62f12513e1e9bfe_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:ec389417464ad3fc8d729a1c9b73d7be39949bb7996719b03203b2cc78413376_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:14e0072862fd56196b719a1587bf54e525b7f19f6790c9009ec23dcf9a04d1a9_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:4add4b0542fc1434a8d11a785ca57244f549a4eacf492ef728193e2f63143159_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:d67c6b1abce362da0b158c4fafb6bae1ca5070ac32ebfc9aa16be475ba223690_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:21fb603cbe41821c395b20adf95321b03a93a9eddfaa82f6abd87d181a974c39_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:64a11074a4333a50079ac98cf842c2feaa4226d5f964c171a342d252f42e4438_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:bb2e8930ec4ab4655e79a71b0ff2fbe393599cc93c01505f940f4377a7e59883_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:0efd32861819fac6fcdb611070c30efbbce1d34eaa975c48f793fd7b260d822c_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:382978f67464db840edabc8f33ec517d006712aa4b71f118fcf0dea6edaee313_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:93d9310d3e4960e3b9028310b02baa0ce31ab26b1f2579a91951140ef7dcfeff_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:40407c0e28258f463e0e50c2e5d00570e2558c7b34da6c9cb44939c2dd7efba9_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:5d72b09f497d323a6e22931941efe2c3c45bd7018e84ca3e2062f1f890624e9b_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:7e08088dc72f668b36f67b18c2ec2cbdb621d547f00699b3fb8d6de0ccbaec57_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:0fbd642c16e0b4e60294c288cc2e69f54bab0fff2c02556272e2f7b076cff6a8_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:44cfa2761d81d4252299f136c244a7c80c674465d718a38d11e0422e3c5414a5_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:a32d3561c4c42fe4787857b4c5743d892323c947c1f0b34ce03d3f4dd383a2f4_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:2dacc084a16471146386295bbb717aa3bf7c6f0cdd1c481fea08ec7795e04731_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3076a8bca874bda3105218f6572ce745e8d820ad1088ecc22982efcd2f3945b7_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:feabb4aa3cd69446f4a85723d63e17db484f07c73f2f02a6562b9cc0558e3e1e_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:172e8395fd0a6515bda05645536fa9f84d80c11c3ab85643d2910db60faf40d6_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:728048a303c69ac524c4738808755f4cbd1a391bcbce052f9d777e97942f5959_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:f6f5c1b86e199af5beaf1820c298f21fddab68cd6adb401d674a4e1724ec457f_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:bee2c0243285c9197bdeea46a00cc15867bb439e7c2dc830e3b1501d0c87e5e3_ppc64le as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:c4838ac12d5c6d5305d118c98ca008c47b32d5325dedb98c40b5e2a294de94d6_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:dbbfc35b869db36a8075e4476fc80d3e5020dd335618e76998c47f6501dd97cc_amd64 as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:04239174dd2fcf854f3ce65b313f114e39b556ddb92e2a5a3fe807e9d315af95_s390x as a component of RHACS 4.0 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:28dda88671e98ef6c88c3bb3989021fc3650247c10514794de678f0f3822cede_ppc64le as a component of RHACS 4.0 for RHEL 8
  • +4 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)