RHSA-2024:6779MediumCVSS 8.2

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.6 bug fixes and container updates

Published
September 18, 2024
Last Modified
August 16, 2026

🔗 CVE IDs covered (4)

CVE-2024-42459 →CVE-2024-42460 →CVE-2024-42461 →CVE-2024-48949 →

📋 Description

CVE-2024-42459 — elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check CVE-2024-42460 — elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks CVE-2024-42461 — elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:04f933ae25286502ba69b1c7d3d808b402d77b9a094dab1a1cfac94eaa52575d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:260c69b619b9e98d76a5c0fc099baeb1039ff5fcccf3b5435dc652b3060d1c1e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:b8a2a0e9f9ac40b7aee8724d5188711f9f9481ca262b18e0a39c68624f9d48fe_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:cc2113e24fae6d8fb6cb541c46281b77bf7e397a835540486d421d4cc3fe6f59_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:1ede160cc20b382d0fce53ab5ba1d6ce8e9b5d48d493ea9521f4d18305a139a5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:32f19c50f9af94a433f69f98bbd9e4f6526b453ff9eb4b43766143bec6d064d8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:7686a34b69f54378fc0ddba4e8948aa8fec2960e883bbc6213a63c79b6fbee97_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:a51868a3f8bee63323a3be11cacd2a3cf4111191839d59e2bf569be8f6e9a182_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:113dc80b805b266432f627dc247869477fa3415d725f355154129ca50eeea787_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:83594aa2e3c9576d5490aa3ef33e8a5b45a2d0ebc3bdc4caabfb6257e3d53ea1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:affd892efa00386e3bfd1712c89e94af3d3d8e4642b5156b0c9c8d4f49e9c183_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c13a7bfe6f06af04593cfc736c6cf532db75a7d8aa769d26c3ef16ed3041fcf0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:1caa2a409aee60388a6113cf401b1769affc4a3ef68cc2b5d6e40f4db72569ff_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:92631739dd1a8e03b91e9d6445fe99b1f5235328cf0fbcdb5101ae3e0d0220ce_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:d47381bc36bafc08786a57a709842a9712c06a192d900f1a7f15b51e04479e9c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:fc3dc12973da9599a9d688f78fff4f64fa870005a090867655cba652564dfe8b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:20b70a753c37dcb53699dbe71e7f833d54eca4b7cda2375915631d92f99e5169_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:9af70d62cfb89ec3b525e5727b1ccaf1b1195e2c531b4f1b77a7f0fce147ecc8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:bbe91de770075c03d18159f78e09b132b1029ccba5dbd80015e9688206002fcb_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:c8d2c2ce82ce92c3a5c35782189bbd99fef38cc4c38a59d30f0e3268f035f582_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:4ca847344c88c008fc105eb8c9a3fb8ffed51e9e29d45aa67e110ca8a9efad52_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:fae6030bf0d8c19b3a113e2dce414a1bc3274896d8429c927e0641d9c8b3f50e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:fe9d19d8fee89aa9a69ed9801bf07ad9f1c10be7539199cb711a2954e67f3dce_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:08603272cf3c0f6d42764625d67b059703691985a977482b65e0adf347f76093_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3474ba019a43f51ecef4ada8fa0853a8299a506f9ab36f286fd5ec7b016c1d45_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:4f4550ed71a91c7d5240d0c8fc2da16f52d8a8fe81e46b18322648704627528c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:a9814088c7f0587a24448e7831e633a5a5ba1a2e5a4ed5cc02b2fbb6b9c82ba1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:16ca5465c69a7f248967be22efc0af33effa9427fd77d75636fd434b225a5299_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:59b871a029e5097fb498074ac52a77b2d1daf3389d3cf2a767278ffc7486be16_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • +146 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)