RHSA-2026:72879HighCVSS 7.8

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.3 security update

Published
September 28, 2026
Last Modified
October 5, 2026

🔗 CVE IDs covered (5)

CVE-2026-17106 →CVE-2026-41178 →CVE-2026-46600 →CVE-2026-56852 →CVE-2026-84445 →

📋 Description

CVE-2026-17106 — github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction CVE-2026-41178 — github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers CVE-2026-46600 — golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing CVE-2026-56852 — golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

🎯 Affected products185

  • Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:54f8b6ccec909ed1fec73b47cef80597e34716a1decaf5c90b251ceb9c1aee30_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:c38a94af90d5eed113a9304f551021fec7943db3efa39b02d16caf84b04c12fc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:c9cec03e784c390f312e7fbc9a6a367e374bc2d80baf6579167c5ba3d5686224_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:e75cf8ed7eaf142dd8ec6c6e4d76455481941426a7cb276fa9e9ba877d6d5940_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3d054c9b36d241de40b731b47f229a3ff62c1144c5dac0bfe6a04d445dcf1a44_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:4affd8bd1d9c18f4fc10f2a47f3247b524fa5ad51617c13c58cbcab00634f1bf_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:865867c09701a220ff2433b4290436b37e2088f10c3227c8745e8a137ae77ce3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:a685cd4cca364da34ffddd026b18d68eeca264f2167dd53043cb1fc96fc667b9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:0d929bfd6bccef9844a4df4f24c972b4fa13fcd93d2881812ff7c2d0461b91b2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:55dea39a2755dc217f237f136d80fabea1d8d5107620cfccee99ddee57414cfc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:7761ba203bc0ce29a3f7862191df85ae14a3406c5cde8173b11dac703deb5554_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c29096211f893f979953c91a561bd882e4121eba41bb18041d9c774123f1ef13_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:6203b59fa85fc929918412a1a3c0b4bb43797499d4e4669d54152c29362e5289_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:7e660d690f0c813ee2d4bff7ba4cb8aecffd3de7f21321262fb3e446d6cb40c5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:aa7ca316ec068e466c4a413b83b3f24a26653dc2c63497a5f6f48a8cc44c36c7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:db4ec0332b919372a8e2ae13573b3b19ccd77aad4df35f5385da1a74ec9928b0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:05139f6fa53264d217a69e21cef6bdefc4f23e0778a072727634b956d6829b26_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:88b855f91a043c6ab8cb119531f1aafdc96294fe421d2f0daaa0445aa191ca3f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:8df225b668a28c11ad4eb82f6b11ddfdd7a264f292f86c3f6153966bbcc14644_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:dbe86a2ee7f2ee66d643098d1fd9eda474a178104b1d530b0a1d4a2e3c741238_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:29c2a890517b616a72a8b336d2ca9cea64a4bb005f7d1b5d6f8b87ad4183edde_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:74f0b98aef753f2aeb6396689405d9db466759c8c834402d701d413e92300afb_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:bf762d67aab4bb1885ecb337b7a505ffd895284a894fe6c5d9d11ceccf3c78ae_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:f452619daf7de387492627c2779eb8d9c4d41a590404b995285d675154cd8feb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:5d198293a9e8cc2c2b9eb1dd099ec3d94ab9125e632e58cbb4cc22e658e3b5ba_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:726b711364cb5a81db4c71756d346ec25cb3eb0781100aa8106bb46837a40e87_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:76ec1c472674181715ad17badce0a9756c05280a3acf5ed45b0c4292ae019c66_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:ff20ef86fd3c8a4a47790f45bdf55937243360ec1a28191d6784a551b833070c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:0ac123b5d7d96124df3473f52f311560046410471d299cf5027bf8c1ae470982_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17
  • +155 more not shown

✅ Remediation

Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this issue, avoid processing tar archives from untrusted sources. When handling archives from potentially untrusted origins, ensure that the extraction process is executed with the least privileges necessary to limit the impact of any arbitrary file write attempts. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)