RHSA-2024:6236MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.5 security and bug fix update

Published
September 3, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2023-45142 →CVE-2023-47108 →

📋 Description

CVE-2023-45142 — opentelemetry: DoS vulnerability in otelhttp CVE-2023-47108 — opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:5dc48c73b819e6539fb25e875c99c53a6c665c2ad1f3c730e587d3138d1984c0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:6aabf2bd24851d9febb82f44f19b3c36fa5f4d1de6dec4e49c24ade33e7256ad_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:6c8390c85018e5a5057ea20aae74e0cd72e2d9cea01aa6547f86a9a27bc3cef0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:92e0d04108140a7462b822e329b7d8d9a8ef57cc6860ff45eed2589ebae2c57c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:21346be87fb4ff0ae27f7b838f41c33b4b84c8ddbfac609da929885634047156_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:5efeca3fd6f6961bc49cd8086dd3feb842a708a46621e7b0f38f79f6d5673d46_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:df10c9b42687b6766e9d64ff7113ae8c53b0acceac67695c6cc33b739dbbde69_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:ec40d7e3c3369a2bd56ee40f86693b2d87a23bf99ab5467fb7eda253a0acbb7d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:2cd00e20d2db6777865acbcfa6c911cb20c4ad76d56a8d515b1c3485699994b1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:94731f309409e3860f6a6d591dea646e92c70e03f1c753540e03f13d77286ccf_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:e5d4dbf440c000c03b0b09b99e68646c531e3cee5d6ed34d52f31f4bc4427c84_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:f869ac05fa96e19944293e4af50a3a5a740308d9a97489ade7d3aa1f9f7a4e26_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:568a1f42c59cb872164eafa3d32f45c9e2a560367132492b154d484f7ccd8f01_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:64baa1c7dc2a7a7ea95a908fd4430e08a0cfbad89583937db52a13d9ccc94fef_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:7dbcc4da7523378de21fd91d15cb6a07bc2902a8d7144b8519a5cbecce7f4a4e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:d4199b0356001d14a3cf1abb879d9891122c77b7c38a2443a989a3ea035b1d0b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:0c52df3aee599983c3a2fd08c9ddf379e4093db321d62cfcbbe3ace13540146b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:1c5c83fdaaf9ed3a05d1dbb6249798558eaefd823097b0a5b2d2cfad2a992bb9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:7e28bc66e98a67c80b08046c2c71e56493c50d9303b339778aa419bb7b964717_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:e7e2f3673d23867eb52cf4cdbd31f3b169af77e2ef3b9daef80ef18e2d4e6783_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:2195182df0c5df6d5c78fbf8457e6f0c89909b83d78aeb50ffe76347d5bdf0bc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:3e44824bb97799fbcb5302fc898176eec925917a0cc042627ad230f6022401a2_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:b0c8f104f30cce48893593c5de9d7b2fbc294da7480b3590151e85a7283d7258_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:38467f0ead971f3ef652fd491363be1ac32f205020c2004c1237e68fc196e25a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:6ca78be7517da629f4f4cc9ba57ee68104fbc84b766a33ad0e0ad66d6e8828b8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:fa336f21af4bc80ef22596d0def4e88bdc7d49f3d113f561049c3da865c4213e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:fa4ada11b4904c07fa7a0707581572df165571170391dbee34c6e533c20ce7c4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:01c9b9bf4f0dd38cc524053f01b18fa25ad02dbee828cba176e4912e35f5bac6_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:84e055b60db74cdb14773ac65c9eb3963418f8c8af58dd4fc312d7835a178974_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • +146 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: As a workaround to stop being affected otelhttp.WithFilter() can be used. For convenience and safe usage of this library, it should by default mark with the label unknown non-standard HTTP methods and User agents to show that such requests were made but do not increase cardinality. In case someone wants to stay with the current behavior, library API should allow to enable it. The other possibility is to disable HTTP metrics instrumentation by passing otelhttp.WithMeterProvider option with noop.NewMeterProvider. Workaround: As a workaround, use a view removing the attributes. Another possibility is to disable grpc metrics instrumentation by passing otelgrpc.WithMeterProvider option with noop.NewMeterProvider.

🔗 References (5)