RHSA-2024:0304HighCVSS 8.8

Red Hat Security Advisory: RHACS 3.74 enhancement and security update

Published
January 18, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (4)

CVE-2023-5868 →CVE-2023-5869 →CVE-2023-5870 →CVE-2023-39417 →

📋 Description

CVE-2023-5868 — postgresql: Memory disclosure in aggregate function calls CVE-2023-5869 — postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5870 — postgresql: Role pg_signal_backend can signal certain superuser processes. CVE-2023-39417 — postgresql: extension script @substitutions@ within quoting allow SQL injection

🎯 Affected products34

  • RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:4f8a9b5a334d2a2ddcd8d1174a007fc75722b8a1ef53db951767bfcf8a2a55cd_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:9738b66518ede2a453399c35bbe4370a4692dd6acd2e3a29036a4074abcbfc3e_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:c6c389aed1fa429d92b38c137a9036d25e7780fcc6ae93850419b835048aaa69_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:d1908d4ad00269a2e46840f13fe28b1ebfe58010c2e6e63d2b007242673b574f_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:f62686b1a19bd8fe0ef052bbde4b8b84c11ed1de1efabd0bd59fa7531c8a3bdb_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:fe52bc3ea806398c0982ca15d594ed20085e7e1ca4041e81c933115bb79c8d15_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:36f8aee19c860cea156b1faf5795fd46bee58af9993d35e68d0a9a2dab622108_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:a8b18859c5f5f1f9242e3346af6bdcdf6c23580fae2b8d9bd283b935805ca7b4_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:cdf3f9637070bb684a8c5f08d91ae21b068e813190db3e55638e8688410e6703_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:0da809964e0abfd857718ec4defa91a2a097649fcf25c88d593ff52092496787_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:ecba5d7dbbf74e3a7894c7d18ebe32607c6234513f0b498119015d2ecf88f241_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:efb1a786e49503bb7e10278cea988597d5fe8d6a19e4e106137d8eab36afb716_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:9ba3858a639c3e8e50a2445e54eea49ad4555a02de8597708bb17128b1778780_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:c123d584c63179723718832aba90561ed4838e6546a8c25698dbfe008807b5c7_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:eacae828588cd2d5bbb41ffdec56f20e8c8113a0549ff218c121826d7e9601fc_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:25260d6f82dc46ca17c25fe78dc7b3cba831b5b72e030f5fb1841c66f5036e02_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:4dc99f97f81df5236b37c19bca4094c54835f00303fca696442fddd0c315b290_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:96f61ccafc4dccfa78948f31fa5253ab958a069412439e59ccca59a8ef49910b_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1694bf23fe49471992572a0dd784ecdc3095908f61d447e278c590fa80c3e7b8_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:4c0b2c0246fa78a2c2d52f7439b007465ef67b26bc213353df0be459c971aab2_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:b37d6a57e78698f664b072e0ffe2f8f6e438cd696cf9ba14a73ca5344690abd7_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:19a8efae0c7b616f3f14b08b2d8e962e71b22a572b95aa8d99c9671296985ed2_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:25388d80461f93743df2b2ea0fe6e332ee86f23d452596751cfa0948c378a995_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3342ed9349de59d7d14a32425aadf850aef4ceeaacb5467a1e118a938e34283f_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:36c4f9404f0ee7457d5a1063b6b9b91c7e24c2c1e02a6902516afbf42adcc755_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ec99dd00a1ec67096d4a58389c813118f4392d4b23c3954c280919fd63281674_s390x as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:f72eba20d8474e5da3ee7f54f6d5d873922bbaecf9a79d9620421dd1363627a8_amd64 as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:2c06eafb5cc0a09680545448948b4633712bdab454aa476cd807e92b2dfe8f3d_ppc64le as a component of RHACS 3.74 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:572dba1997ebdf2b5d509dc260208f5fadcd76cf3e1bd5ac0d4b1c31d43eecc0_s390x as a component of RHACS 3.74 for RHEL 8
  • +4 more not shown

✅ Remediation

If you are using an earlier version of RHACS 3.74, you are advised to upgrade to patch release 3.74.8. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (8)