RHSA-2023:4980CriticalCVSS 9.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.7 security and bug fix updates

Published
September 5, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (3)

CVE-2023-37903 →CVE-2023-3089 →CVE-2023-37466 →

📋 Description

CVE-2023-3089 — openshift: OCP & FIPS mode CVE-2023-37466 — vm2: Promise handler sanitization can be bypassed allowing attackers to escape the sandbox and run arbitrary code CVE-2023-37903 — vm2: custom inspect function allows attackers to escape the sandbox and run arbitrary code

🎯 Affected products192

  • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:01d130f628336ef29da213c77c41fc5f2f1d1755c942bbf6fbd02ec19ee9beb7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:1f53c62bf9d026c29d24310f34f11327fcfef28d35024f802776789b340fafaa_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:6d9acf82b8b75611439e79534952071a6f80e4d3ec49d1c5016c116b9f0aef5b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:bce6f86507dc1e978c942653659d58385972fb368c751358e78b4c8140c05269_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:218ebe870288fcd64b33cf7ebd8bbbf7bd65e6ca74761467ef1c8108613a76d9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:570f22041bbf91d4d8e01727c5918d6ec012e418ad91259e74ace2bdb0ed8a78_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:cfb286809df32f10692291ca50ed3a5ed930d4338b4c07585babf1b8e1459ecf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:f3b35a48ae933eddb7b0d3df8f151c10a41287a36c7b391a156bf41bb0968d6c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:0bcc2e344dd124ceb6e780cc4790e4584ae6ff87dd0f8c363b5eae02b0172e53_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:438fe6ece49d6cf275720557c8f91b82c4352b2ff2897ca8c2295307bcadfb98_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:b11c88ec91b3e2287d26604ca00ea1caa2275a836e9ade05c56757bbc07591e3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:cd850194357d20edd8696a65f99ad3d7ee757b85a7f9a805c9a3a02a0a0bfb3d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:90557802720e3957601cf8b7d578355d067d4f58f9a542e69da628ddbd178aa5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:bce0d6f95a2b818a1af8f47cb925b8923fb2baf0e823e0c2941c4cd371d7f7c5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:c9013b14d73bae41ba70c05ca30077ea3cc853f0e857d2fef316ddd09bd64e77_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:24722a6439a651ec205da41c41809e201f7237a36df14400761c9efd90c3b4fd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:520ec081c05cf465e324f1b11ae125201190144e15b3f621fd5cd829abab1739_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:a82fb558db3afb7d8cbbc6be2283986a7d9eff020affd974214ed738be4b6f87_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:a84bd225caf327ac869c6733c3afff8737b0ef5e94afad98a69174755ddfff89_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:61c83d29953198e546f54648f4ef60a85c7578c28a93bb7f8b6d3662276d0efa_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:6419e545c6c2594cb89911e4201e890d04066af52ee769e2df0f4fba5deb7e91_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:a71cec1afcb3c468627c9e43960a2bc135409149a29ef8e0b8b1da8ac4e90053_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:e647d31cea84d1b469e4ae672e95bef6300527e1c927178b933e21d828b82f0e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:05f6463804fd1b4f9d0593cb6f3398db9e7e3c329c5aecb94b9934edf9152767_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:2afdff8b721e16ed802a1f841189c0bc89f1ddb1a770fad7713bc9ec5efe0384_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:b5eb3384842cd80a7c29be577a9b4e4071f6c80f431d5cf3a795e0fb41b3a750_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/acm-volsync-addon-controller-rhel8@sha256:f89816aa1fcbe38761d89d55f3fb323338f3045866a9b783271e9fe9d29ab87a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:27dc8a5a11ce4d5e3f14add31e36d6652fdba6199d325bb98b3ad9145c81a3f2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:54daadf85b40f8727eb70bf6a35ca00eb5ba61bafdaa08ea9ac3acbfb676f0c4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • +162 more not shown

✅ Remediation

For information and instructions for these updates, see the following article: https://access.redhat.com/solutions/7022540. For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/install/installing#installing-while-connected-online Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)