RHSA-2024:8546HighCVSS 8.2

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates

Published
October 28, 2024
Last Modified
August 16, 2026

🔗 CVE IDs covered (4)

CVE-2024-42459 →CVE-2024-42460 →CVE-2024-42461 →CVE-2024-48949 →

📋 Description

CVE-2024-42459 — elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check CVE-2024-42460 — elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks CVE-2024-42461 — elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed CVE-2024-48949 — elliptic: Missing Validation in Elliptic's EDDSA Signature Verification

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:1c8caec4ce409113dd9e7556bc9e454a884181a80012eba214f48f0cc87c5cfd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:72d2b61261acf76e06ef2ff3cd148e10f3bb34dfe8d808705e8e8c33b2c8e747_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:9ad88254b62951d22283fca6350f396b8e3666858ddbba366385c0a302939629_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:f537efa449916a6e30f396d38099c7720f1cc9df518a8b0bade623265551030f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:43b74eb0dafc0a8ca9eb54ef61123c11afd166255f9d1dc9ea94eefce51126c4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:74318a0f7ec6450147d4278ce16f3f9e44e5948047a285b278f2339dab8a8143_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:b5ae44b5aefe821fb0d44a64620d9bac3eff81346980ef9d97b999e1030e63b8_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:d29df3bb0e17002057c795c2aff61f0e9613161f7b801b626b82be8a8179bb00_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:0855cd249b6e585a4aa0b13d596abf6dee6a0e0db506552608dc92f19ed08acc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:b743dde376ba398c828904bf6dded2c9ed17fdc4f7f3c1902b2a3d4fb493cf01_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:ccf61b0dad54ea979eda40cc6564c2c4d8c1e0184f03fe9c9d41b82d999c6f00_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:edcb5c18ac4ee2399b7388fa90d3df5b0ad5c98376726c9f80619f1877572c2b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:900e022de6f0c959bc53b2253a2e0e2c105b3d4124419a16b4fb54a557078173_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:95a8624cb4ebb7c43eca56f59b0f81ef6159e25d9a2ec2647566a3dca196ee70_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:a4843f7b5791597335d5a4ff0ef1f64f29168e150657b40a525e4d03596322b7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:c4d9478b93d93373030ef500c968f35aafa1aef24a08f865e98668e3786a5a0f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:5a16e53a265e3bbe9c2b23f5a756f3901053ca6bcf2d654dbe156eb01be85946_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:5d2b57e043b46cdf71bd53bead0e6bebb448881cfdcc1e2da14bacd11174f365_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:cea6978bc0b5ba59bfe71206adb21d060678434c82b70186c9cbbca287f787cd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:d5e65f56afd3d4cd4d67e068936f8be05e6b7334feb880bd535e92b613dd4642_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:271ed0c5434f5820c32692ad75ce24fa820536087bc6d47270a9bfa5b22f610b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:354205272a1834466ef66ad4147c4260f458f24fb6337e8984f60c8f0023dab7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:5866f2d1a7e4d7f47ae20c4b095b84d775746a05b8b830dd4b18ec2a16440ba6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:833842764ca7579a7b2877382f8f28ef28750865ed9dcf74d2106eb288109f88_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:dae65df2c658c53edf18a55f08fc0543de2db343108e47085ac0ca23a7c247f8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f0003a4ce59af9427c02f0648149296bc4f28807072cf399decbb0d39eb911ca_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:ffc0d530198f65b76d5c7107fd680f405260299ccac8418a07e8a79e27dc3461_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:12ee729f766cd0eb6acf55b03cdbc740cbb3aeb120fa881408099deb7d9b03e3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:27276baa2ce5e91c42ab5092fc76d220f0ebbb54c1f5ff57daa33dca4434deb1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • +146 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)