- Vulnerability/
- RHSA-2022:0856
RHSA-2022:0856: Moderate: Red Hat Advanced Cluster Management 2.2.11 security updates and bug fixes
First published: Mon Mar 14 2022(Updated: )
Red Hat Advanced Cluster Management for Kubernetes 2.2.11 images<br>Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments.<br>Clusters and applications are all visible and managed from a single console — with security policy built in.<br>This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which provide security fixes, bug fixes and container upgrades. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release:<br><a href="https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html/release_notes/</a> Security updates:<br><li> object-path: Type confusion vulnerability can lead to a bypass of CVE-2020-15256 (CVE-2021-23434)</li> <li> follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2022-0155)</li> Related bugs: <br><li> RHACM 2.2.11 images (Bugzilla #2029508)</li> <li> ClusterImageSet has 4.5 which is not supported in ACM 2.2.10 (Bugzilla #2030859)</li>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Advanced Cluster Management |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2022:0856?
The severity of RHSA-2022:0856 is classified as important.
How do I fix RHSA-2022:0856?
To fix RHSA-2022:0856, you should update your Red Hat Advanced Cluster Management for Kubernetes to the latest version.
What vulnerabilities are addressed in RHSA-2022:0856?
RHSA-2022:0856 addresses multiple vulnerabilities that impact Red Hat Advanced Cluster Management for Kubernetes.
Which versions of Red Hat Advanced Cluster Management are affected by RHSA-2022:0856?
Red Hat Advanced Cluster Management for Kubernetes prior to version 2.2.12 is affected by RHSA-2022:0856.
Is there a workaround for RHSA-2022:0856 if I cannot update immediately?
There are no specific workarounds recommended for RHSA-2022:0856 aside from applying the update.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- agent/remedy
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:0856
- agent/title
- agent/references
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat advanced cluster management