Red Hat Security AdvisoryRHSA-2025:4666
Red Hat Advanced Cluster Management 2.11.7 container updates
Released 2025-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/acm-grafana-rhel9, rhacm2/acm-prometheus-config-reloader-rhel9, rhacm2/acm-prometheus-rhel9 +16
Fixes 5 records
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00939 · Published 2025-02-26 · Partial fix · 0.35.0 CWE-770
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-03-21 · Partial fix · 4.5.2, 5.2.2 CWE-405
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0071 · Published 2025-01-28 · Partial fix · 1.22.11, 1.23.5 +1
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.0029 · Published 2025-02-06 · Partial fix · 1.22.12, 1.23.6 +1
THREATIST.IORead the docs