Red Hat Security Advisory

RHSA-2024:7443

RHACS 4.5 enhancement and security update

Released 2024-10-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10

TI-2024-26227 CVE-2024-39249 · GHSA-x6xm-h7hm-7p9q

MEDIUM 40

Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00819 Published 2024-07-01 Partial fix CWE-1333