Red Hat Security Advisory

RHSA-2024:4836

RHACS 4.5 enhancement and security update

Released 2024-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10

TI-2024-19670 CVE-2024-29903 · GHSA-95pr-fxf5-86gv

HIGH 66

Cosign provides code signing and transparency for containers and binaries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00851 Published 2024-04-10 Fixed in 2.2.4 CWE-770

TI-2024-19051 CVE-2024-28849 · GHSA-cxjh-pqwp-8mfp

MEDIUM 62

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01044 Published 2024-03-14 Partial fix · 1.15.6 CWE-200

TI-2024-19669 CVE-2024-29902 · GHSA-88jx-383q-w4qc

MEDIUM 60

Cosign provides code signing and transparency for containers and binaries.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00658 Published 2024-04-10 Fixed in 2.2.4 CWE-770