RHSA-2024:10865MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.1 bug fixes and container updates

Published
December 5, 2024
Last Modified
August 2, 2026

🔗 CVE IDs covered (2)

CVE-2024-45296 →CVE-2024-45813 →

📋 Description

CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45813 — find-my-way: ReDoS vulnerability in multiparametric routes

🎯 Affected products184

  • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:2fce56f38175b6d46866d0fe96b4d6d7100c48a508a70af243bf869bb6b8e8e9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:4c8f04a86e4dded8580035faac7465356010ea99a0c09e66f12ade33ff5471b8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:cf55f5e703052183ad28462f462dc50d96540f459108b395e472a1b86c6122d4_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cli-rhel9@sha256:fd41ebf36cdde7d7100dc006d907091f85d3189a5efbe605b6b5e5c6c984c724_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:1d5aa1d44bb4490bdeaacc6370365553a23c806d80285ce8afaa479a576d182d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:54961bf30ba6d4c1f9637fcc454dad8e274fd96d7f435ed2829431ee5a887146_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:77753a37e514a4cb361ef242388cf728dd3e7641049a55d012400c0de02f0685_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:9b1ce03fbd27dac35aba6421e9ae33d7bb8c7a2b49e57fef1de1c8cae714dd6a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:0ba558871af7e410b90c65967eb6fe94c9c4b8150ab70985b2db6d608ccb61f8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:5acb211180067862dc55a0c92dbb881705630c7fe6808db578b2f76847934fec_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:9d9601851866122177da3b84c15fa57a6402536f71263b0c8749dbf3795cc25e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:ebf59eb18929d8640572297a26fdb18ee8ea4f277e6bc63e5f611031df7f290c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:409b215caa3f00be685aaa79daf1cde365cc93bedff87fdd7527374763350217_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:4feab2369f79b350363b45b145c2fc1bbddb745d5bf1b101e3a6aa6f5844170d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:69093de6cabd8dac15a10bf0e6ae128f3a1660479d43350488822c41fb79bc5b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:731b417c5b4e5c8d0a802803561ab07effe14917928ce436dc322a43c1e2cac7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:1d2266c12ce7e28e195418d6cf569503364d972f831171e847db0ea3b2beda46_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:28d9070b18ac18b01ac1bedb40212eaeb5b1e4c614e290812cdcf6de9b1e1458_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:2950997a53dbbdab441ef15e6f3b66179050e579acfb687b80e57eadcd89e2d2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:fcba76752acdab8a906ecbc6f19cb0ce7984b6a264d0eb5e198669172a51c581_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:27270b5be5809a3c67eec65596389528072f17548e6b1330fb601ffecc67dffd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:70976105c76e62fdef245079f8d0b888770cd6414d285a4650d6d5430bd2d4e5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:7c1aa2b92590dd33982f0182eab42ef7032ce45d3928d169d9d7252e235cbec1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-multicluster-observability-addon-rhel9@sha256:c65a5aadd864e5a0c7d30a4611605931c402d44239e6c47782ab6de8beb60b8c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:012049da64cc7c811cb5ead0ec10dbe7416022b3990d8045cdb8db867bbab618_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:3aa877dc459bd746cecba7bcf169cb050f09dedfcb926880e7eab8c1e807af09_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:7c95eda336ff35d8b5d43d23ca909c1823081b1b2b919e87db510fce847c0bdd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:9a01b01450a135ee9f65b83409444aeb4f8e37d0ac3a8b9d4c51f2fe89df90dd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:834b5ba15a3c3f96b2128b11df8a5301465a40bb54f85c13a7a0e7dfba635448_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9
  • +154 more not shown

✅ Remediation

Before applying this update, make sure all previously released erratas are relevant and have been applied to your system. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)