RHSA-2024:0332HighCVSS 8.8

Red Hat Security Advisory: ACS 4.1 enhancement update

Published
January 22, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (4)

CVE-2023-39417 →CVE-2023-5868 →CVE-2023-5869 →CVE-2023-5870 →

📋 Description

CVE-2023-5868 — postgresql: Memory disclosure in aggregate function calls CVE-2023-5869 — postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5870 — postgresql: Role pg_signal_backend can signal certain superuser processes. CVE-2023-39417 — postgresql: extension script @substitutions@ within quoting allow SQL injection

🎯 Affected products34

  • RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:654d89ecefd0aa9c938c1bcccb860c0fd52d8dc0cca5aa642cd43650fd135240_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:a07c2547b5038a5220e1ec79f308f4fb118e571dc69fac4050d45f3ffbd89963_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:baabcef3dae19d831bc7ce48b088bb3b7d5c293a7b9eb0166cf707f5e56eaecf_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:0eabf7fef32d48523d5ecd7d19c76071b50fe0a1b2a3e0a3367bebbab5d0d1df_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:9d8e8931d2e8d310009be2e23e63d583ea1cd0af9a054cb6e9d831261a066cc0_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:e1aa435f4b8ab7af94ee8d7f8024ec10f213345da46977a0db357cf44b597d0d_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:30af6f4e554b6efb379d2551af0b8031eafd353b484d0c922c6b018932c49456_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:33d3f3498d0a1104f07e766b8713a49687b25fabdd309d41d4dbefa187fe11f8_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:cbca849213c4b284a8a3002ccbc57f6f48eeb7b7a407620a718e35a153610aa7_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:21bc62fc2a99d707329a3868b196d5630b219d1636bdd7355e416b9c82d1244d_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:33d4fd6baccfa514005fd5f2c31fd35f531376a08cc403dc919eb77f0ef82eac_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:a4298e0029f0fb26c13776e2084898bc2f6027adb13e3647bb597d317db0eb9d_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:47f9e289774c512d112b9fa0e1e957eba62b09955a81e94f50252d1be6a754c5_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:7c378e4f875480a561273a4d9d8474892c292a83fdbb853ffe400cf8da29178e_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:b26133843687cc50e2c52d6067d8b3369b5cb28dfbfd15dd4b6062096673195a_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:0aa307408db60e2b0d20aa0b4423812f5bb799de03a65dd1f850b2a989f7fabf_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:1925ed2953e9c5fec9aa8b455e01caca2ffcfbed9f34c3c76f081b4e74717e22_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:aacc0f4845391e979d7bb6f9654b24a55675a2cf70c350d3f0743e987b3019af_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:05095d9b07b672f4ed91dde7fa7d4756f74dba6161d7d3f3e82670e5876fac91_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:1b4e23fdd46f56b644aa22d2bf18346552b78a8ca1d3c0270273c6240bbcadf3_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:257ffe0ca5b4ae31458f10d22100225d40f68bff09862a0b1d9431ab1387a4a1_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:8ca74b4f25e89f3539553e5f532a7d5cc143bce759a52a1cdc52939cd319d2b9_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b3cbfd45a5604173847ab82b03fc55024d0ea26fb8ad19a415de8a1f9ad6557c_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:cb8ed4575919e58e9cac1cfed85676861eb83caf07c4905fc0aca58993c2aaa4_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3d8a099fad25c2071a004bcc0e9d817447e95b9a20740e2f22621d1b81bc61cf_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:485b6501211422873da51c563fe04c959812ed5102cf54ddead08a6a08690729_s390x as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:8cca092474de0ffb6273e2f19e0e63f79e1513de043bf62afea32c838390facf_ppc64le as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:3eb5e006da5ec86346472cfb5cdcc7046c8887ce2f640a2252d5b3b1c554fd7c_amd64 as a component of RHACS 4.1 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:604219a74ba59dd37bd54280f9a5eb98a5363539325c728be7f82f716458c9c4_ppc64le as a component of RHACS 4.1 for RHEL 8
  • +4 more not shown

✅ Remediation

If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.6. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (8)