Red Hat Security Advisory

RHSA-2024:6054

ACS 4.4 enhancement and security update

Released 2024-08-29 · Red Hat rating Important · View on Red Hat →

Fixed in

RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10

TI-2024-24810 CVE-2024-37298 · GHSA-3669-72x9-r9p3

HIGH 72

gorilla/schema converts structs to and from form values.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2024-07-01 Partial fix · 1.4.1 CWE-770

TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425

LOW 39

A flaw was found in the github.com/containers/image library.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01279 Published 2024-05-09 Partial fix · 5.29.3, 5.30.1 +66 CWE-354

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532