Red Hat Security Advisory

RHSA-2021:5038

Red Hat Advanced Cluster Management 2.2.10 security updates and bug fixes

Released 2021-12-09 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7 rhacm2/management-ingress-rhel7, rhacm2/memcached-exporter-rhel7, rhacm2/search-aggregator-rhel7 +1
Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8 rhacm2/acm-must-gather-rhel8, rhacm2/acm-operator-bundle, rhacm2/acmesolver-rhel8 +47

TI-2021-06132 CVE-2021-23440 · GHSA-4jqc-8m5r-9rpr

MEDIUM 46

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02206 Published 2021-09-12 Partial fix · 2.0.1, 4.0.1 +2 CWE-843

TI-2021-02726 CVE-2021-3795 · GHSA-44c6-4v22-4mhx

LOW 36

semver-regex is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01517 Published 2021-09-15 Partial fix · 4.0.1, 3.1.3 CWE-1333