RHSA-2024:7994HighCVSS 8.2

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates

Published
October 11, 2024
Last Modified
August 26, 2026

🔗 CVE IDs covered (4)

CVE-2024-42461 →CVE-2024-48949 →CVE-2024-42459 →CVE-2024-42460 →

📋 Description

CVE-2024-42459 — elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check CVE-2024-42460 — elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks CVE-2024-42461 — elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products172

  • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:687933d64d51c31714bedd74a9eb3a1cfd1e9e70a29fe03ed0456b55045b75aa_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:72768116fe2ee67089b7c77c3669d98704f326d672008182c9a4ac68d59e93d5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:ccbf06b5971aba5d30e6479a6c494565923d3e702163d8aeb3a79b2a85407b27_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-cluster-permission-rhel9@sha256:f0a1ee494306bcd2775f3b9f530bd2c4e28fd5eb78538779ba94f5b403e5cb76_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:30f0a68394f2c302781ac8bc62cab32e4565395106a515d44b8ef2c13a7a4304_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:badba9049625f7d22e9dd81379c5555cfff00c4b3a1b5fd9d50c71bb4d922d8f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:dc350091e3075c3dd4b5aa1843c6620d85194fe754c558e0c9a7d42c84508e0d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:dd767f4e351b63d99c01936b5d453050ddc53444ec9455a0ef67480ddb63a147_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:54a3617ac14fbb243187d4a561d94ecd68b6f3a644fd228af4c5fe393e853606_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:8c1ce2f3b4210e71465d04a9e472a392d68dcc489e0ec63a4f7dee6534ac4085_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a106b84a4fe297b029ba3a07c80c54d82ebe749668f2f971797a0e3f53c14ce5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:b1c1169fd70647860a79c5fc377e908d2ec9577b9292d70c19d41fb3e98a55bd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:5a576a0ef5830b8eae2bb7c8c9c1dc2ad40da15fca67c108c117e07d6f144883_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:700f8c1e11be4e5ca9b31437194b8d81f3d4de4c510c8a14df18c49a2e26b073_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:7424ae774b2289bd2c4a11039f0f1b6d6b30840b24c062cd0958848a3a17799b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-grafana-rhel9@sha256:be1fa6c816d09aa3374d891dceee094e7fc713b387b4e23daeb475e0df074f0e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:0352f2a6ca037459417390d4c5edda56549d7734911c5c7c9caa88c891d408b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:156e394aaa75e8ad5256cc7f28083f9b505cc370793b0b8dcd09644fcc9caf7d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:84d3da283d37f802189679174d5a11ae40e7068f7f468ef05345c81ecbf94def_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-must-gather-rhel9@sha256:b1997bef07693501b2e359ad45fdd2c05c45f0644e4b40600be659c84ed35894_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:8f5e0bc9b879020dbacf3e136ea0f488ee464caee74aaec6f321f71386c23b91_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:b6f26f94d353a1290ff71c4069b3accb8d862d26f192d278bacbdebd9bfbf318_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-operator-bundle@sha256:f2dab863d3fc5644757fca7e2d27af3bc3fbf082c0c0e3ff11b3a229fe9e75e6_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0c8485bccf01e7542ed2e608d70b70a588fe3dcf8af46558439b5278e736d2bf_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8d669e410887791765bf617fd920674a2fb5f9f9354db6f637e14f3df28693d9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8e540d7c3e02bbe9a87199ba3d17fa1a42a2baa98f5536f181794f1260d45095_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-config-reloader-rhel9@sha256:a016f6e9ad317dbbeeccb7d0e35ab0cdd44d3f40944e2c00491007a71d21dd9f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:31ed46889be2a39b6d6b41105369a86bf733d6dc010e5dd02fdecd84301200f7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • rhacm2/acm-prometheus-rhel9@sha256:6d34d8527e04c15822aeac18b434b540389575a107d55a2328497225cc3f65b7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • +142 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)