Red Hat Security Advisory

RHSA-2023:3326

Red Hat Advanced Cluster Management 2.6.6 security fixes and container updates

Released 2023-05-26 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-grafana-rhel8, rhacm2/acm-must-gather-rhel8 +45

TI-2023-15608 CVE-2023-32314 · GHSA-whpj-8f3w-67p5

HIGH 82

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.08127 Published 2023-05-15 Partial fix · 3.9.18 CWE-74

TI-2023-15607 CVE-2023-32313 · GHSA-p5gc-c584-jj6v

MEDIUM 63

vm2 is a sandbox that can run untrusted code with Node's built-in modules.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0079 Published 2023-05-15 Partial fix · 3.9.18 CWE-74

TI-2023-13362 CVE-2023-28856

LOW 31

Redis is an open source, in-memory database that persists on disk.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01256 Published 2023-04-18 Partial fix · 7.0.11, 6.2.12 +1 CWE-20