RHSA-2024:10775MediumCVSS 7.5

Red Hat Security Advisory: ACS 4.6 enhancement and security update

Published
December 4, 2024
Last Modified
August 22, 2026

🔗 CVE IDs covered (4)

CVE-2024-4067 →CVE-2024-24789 →CVE-2024-24790 →CVE-2024-39249 →

📋 Description

CVE-2024-4067 — micromatch: vulnerable to Regular Expression Denial of Service CVE-2024-24789 — golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses CVE-2024-39249 — nodejs-async: Regular expression denial of service while parsing function in autoinject

🎯 Affected products53

  • RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:1c69c805f120c2b1530f770efba0287ff7e81483960290d4ce95bf01932270d0_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:77fccea21e5fb788e1b6016d25d2e1fb1f9888223174ec32185879bcc878db30_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:accccf410558960ea1949bf17d8e3bb98a1f1d7b6165088176309def03ffb271_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-central-db-rhel8@sha256:d37a85996f1c5c97a5e0d626f28caea01b03d5c19aa02b186acda292abf0f405_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:54cdf6a0441ddd865e1fd1b0cac000d6009c03bb553bd1f3e3d750bed551a86f_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:85764f9dc6dd2b814a972f86288ac8d5bc63b55867d87179d25c4a69d2458cb8_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:9cc946007966b16eee01c45824a7daf2b7d2bb1db408ad6d64fd30fd1bdc2f61_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-rhel8@sha256:d131a61e86b20065f7a3f32440e4b761818349a1d3008087e609f30368f172f4_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:9b403bc5b07291d817a6c15a675da9abbf89f379c1e59c8f38079b5385ac2758_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ba059270eaa53ec6a3efedbde83359b258abca6f6c5af59ae4edfbe7a2991b9d_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:c4611a7cf8006081bc672e260e50f15ec8e3c4faa4996d6a9215c669af6b6666_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:ec6f7ef589018becd5ddc1ec39d27b6e013d87bf0005e30b423008b058bcdf78_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:751864511f1db57e3bebff4e9afe632ff8f1ad1ee61a70cb0e016325b7afe3dc_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:9f3a6d73287984428082e9d812f943db4d339e956081d4f9d24bd9703879030f_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:c18eb752209b8f4eb30c496aa90b73f97e7d3c509f545a830bd4a93242f08476_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-main-rhel8@sha256:cf8b99d1760198bf0bc3e77bb23ec201800c2569fc0355d4634fa963840ff8de_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:1798a96413edf0ff45bb7196f0e0ec82eff490ddec27a7d3dc2fa2820d730186_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:77827f14557e3551ef914391d14cf2aaa624a0aea465a6e036d4f8ca59d53495_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:c803494bdb0418d27931a15c79f8cf142ae10ccd0a50d76a10c48219d34c59f4_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-operator-bundle@sha256:ce4af0d991cbbdaa03ae510cf12f3e9d818368453e35b43c36f3e4156fb0def4_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:009cd9ee7d9e3dfaab45915bc69dcc6fd69f9be13b25e84b29c3da239d8f7d96_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:3681347b7d5315b1d18414902f7b3d417c3c257f59b3a0f049475baa2a7ac068_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:727a544d5a5080631604e0f2186fdd27168e602c6567bdd9e9e763831b5cf4a3_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-rhel8-operator@sha256:9f91c362d341560249973b3ed66da156393e0850aafd73e3a19be3890183f9f9_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:00f58ad77b33bf8c952f8699f09b1d5e04c9b3089c5f3b8fe262172867497a53_arm64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:143e97970c10b714ef05fb79ebadca21bfd653e46754bfe79cca099a7219e4b3_s390x as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:79f9b5a6aac41130442b1d9bcefc2cb7f54abee4ab3ccb98343088621c6c8c84_ppc64le as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-roxctl-rhel8@sha256:ac1a8f21504f8372e4586179ec28fc08803dfc56314f9d41419b8ec4d1e17426_amd64 as a component of RHACS 4.6 for RHEL 8
  • advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:2e691b947292471de83b26c7e1f9e2b179d1b3010b3909c827a20c0ca32b6210_ppc64le as a component of RHACS 4.6 for RHEL 8
  • +23 more not shown

✅ Remediation

If you are using an earlier version of RHACS, you are advised to upgrade to release 4.6. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)