Red Hat Security Advisory

RHSA-2024:1328

Red Hat Advanced Cluster Management 2.9.3 security and bug fix container updates

Released 2024-03-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 rhacm2/acm-governance-policy-addon-controller-rhel8

TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw

HIGH 72

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-11-10 Partial fix · 0.46.0 CWE-770

TI-2024-16848 CVE-2024-25620 · GHSA-v53g-5gjp-272r

MEDIUM 62

Helm is a tool for managing Charts.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00567 Published 2024-02-14 Partial fix · 3.14.1 CWE-22

TI-2024-17237 CVE-2024-26147 · GHSA-r53h-jv2g-vpx6

MEDIUM 41

Helm is a package manager for Charts for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2024-02-21 Partial fix · 3.14.2 CWE-457

TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr

LOW 36

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01614 Published 2023-10-12 Partial fix · 0.44.0 CWE-770