Red Hat Security AdvisoryRHSA-2024:10775
ACS 4.6 enhancement and security update
Released 2024-12-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHACS 4.6 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator, advanced-cluster-security/rhacs-roxctl-rhel8 +3
Fixes 4 records
Priority MEDIUM 58
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00443 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01952 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority MEDIUM 40
Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00819 · Published 2024-07-01 · Partial fix CWE-1333
Priority LOW 33
The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01429 · Published 2024-05-13 · Partial fix · 4.0.8 CWE-1333
THREATIST.IORead the docs