Red Hat Security Advisory

RHSA-2024:6044

Red Hat Advanced Cluster Management 2.11.2 bug fixes and container updates

Released 2024-08-29 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9, rhacm2/acm-governance-policy-framework-addon-rhel9 +40

Fixes 1 record

TI-2022-09442 CVE-2022-25883 · GHSA-c2qf-rxjj-qqgw

Regular expression denial of service in semver

HIGH 72

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2023-06-21 Partial fix · 7.5.2, 6.3.1 +1 CWE-1333