Red Hat Security Advisory

RHSA-2022:9040

Red Hat Advanced Cluster Management 2.6.3 security update

Released 2022-12-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45

Fixes 2 records

TI-2022-20253 CVE-2022-41912 · GHSA-j2jp-wvqg-wc2g

crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements

MEDIUM 53

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02337 Published 2022-11-28 Partial fix · 0.4.9 CWE-287

TI-2022-03245 CVE-2022-3517 · GHSA-f8q6-p94x-37v3

Uncontrolled resource consumption in minimatch

MEDIUM 43

A vulnerability was found in the minimatch package.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02279 Published 2022-10-17 Partial fix · 3.0.5 CWE-400