RHSA-2024:0337HighCVSS 8.8

Red Hat Security Advisory: RHACS 4.2 security update

Published
January 22, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (4)

CVE-2023-5868 →CVE-2023-5869 →CVE-2023-5870 →CVE-2023-39417 →

📋 Description

CVE-2023-5868 — postgresql: Memory disclosure in aggregate function calls CVE-2023-5869 — postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5870 — postgresql: Role pg_signal_backend can signal certain superuser processes. CVE-2023-39417 — postgresql: extension script @substitutions@ within quoting allow SQL injection

🎯 Affected products34

  • RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:3ad078dd63e1e351360f22a9233b43e65480db1a1786784512eda32305bbdc47_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:524cbd40a09e663dff41c6d1b6d822e462d01b5bb65e863f52de48b8e3276187_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:92f428614e15a57e97cf97b9c2125c3af46c6acee412012c1d6976cbb1487e92_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:497b8f4a25052516d3c069ce9aeec51754a367a339067348b09344245bf1f209_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:4f0110eb786e9da04e5801dccf03172871e317a279d6fe960f97b8142ef394aa_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:55b040ad3b7f6ed38b2cf9398b71060b025349da4a87ea01d3357fcc875c96a8_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:201c55160bed9df7248278aa0fdbc9d732a51b002960db881e8810289f707834_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:45c829805275b99311f86466e360f7def1ea953348feb30bec05238d462f908f_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:9b4e0d67dc891f5e2157d702bcb7ada6845295716924ce01e350344497e1464f_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:15f5cb1c277d2600e4eb87e9125f749cda70a670194cb52ac7c148eab153743e_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:d02399c94eeab210e1e1651270b6125d22e1ff96bfbad71a73632616938c2630_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:d1988189d0813155bb5156c5e82753c499c7bbdb4415bc4cf8784153131d6d46_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:983e840645f92ac1d12fd74382f6807b7dc7a0e750954a23112cab39faa7de91_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:d12dd40975045afad1cd5575ced8ce5c443fd0f872bceca5a759233828a051e6_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:fb51d5e662853c2900d07de06783a908bf6fc609d6ff261c199797465060a750_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:696b60167f9a06502d764a99acc857093b005b82fe12e7d2fe147934b82baf2c_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:6f802f517f043fa06bfd96c6f3258c9c0bcf028eb1c26c9b85803d146e35ca8b_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:9ae9ee59efa910c9d3d80ed5509ce0e22228a1fd189adfdfbe374cd221fbf9f4_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:07ab92c150e68f12b9f4a001787794abfd226162063d669df6fc4d24ff082775_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:50cc44f3036494275b85bcdb83723bc023d29fad766759a6c5f2d02e99e4ba69_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:fc350db1595d2d7b24e9256ce8161e56a7802b457900d9ef43e5067cd9e1c705_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:13127a3aa6c9b626a929bdaff4b5c58076a7d1b07037a9f125abc1efd293776c_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d737c0eed1676a24123983d4d39051e62d6b01863352fa6c25b98e0d0869957d_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:de69ec7687b7ad5db81be96dcffb6d27b9a551381bf717a03476522e5c7fda24_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:276508433afbe1fd8101f70b4ad73d279594793f20660f57cfea384587726450_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:2e5e04ae665f4c12e02dfe366d5b44ebcaa2a10079909d3e11471b0a1a42199f_amd64 as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:4ec5b7f9e4871c9f526693581d7fa8100ebd335a2e8ee241853182cacd9db1e2_s390x as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:337341fac7bf5dab19944d767f57dad2b6a4a31f457cf0e232ef8da48a15f824_ppc64le as a component of RHACS 4.2 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-rhel8@sha256:3904ab010f7bdd83c92c2b03f49bd483e9b007b73253755b9eb93b7be9720c9e_amd64 as a component of RHACS 4.2 for RHEL 8
  • +4 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (8)