RHSA-2023:3435: Important: Red Hat Advanced Cluster Security 3.74 for Kubernetes security update

Published Jun 5, 2023

Updated

This release of RHACS 3.74.4 includes a fix for CVE-2023-24540 by building RHACS with updated Golang.Security Fix(es): golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540) golang: html/template: improper sanitization of CSS values (CVE-2023-24539) golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400) For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed in the References section.

Affected Software

1 affected component

Red Hat Advanced Cluster Security for Kubernetes=3.74

Remediation

Event History

Apr 2, 2026

Advisory Published

via Red Hat·10:18 PM

Data Sourced

via Red Hat·10:18 PM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:3435?

The severity of RHSA-2023:3435 is classified as important.

How do I fix RHSA-2023:3435?

To fix RHSA-2023:3435, you need to update to the latest version of Red Hat Advanced Cluster Security, which includes the necessary patches.

What vulnerabilities are addressed by RHSA-2023:3435?

RHSA-2023:3435 addresses CVE-2023-24540 related to improper handling of JavaScript whitespace and improper sanitization of CSS values.

Is RHSA-2023:3435 applicable to all versions of Red Hat Advanced Cluster Security?

RHSA-2023:3435 applies to affected versions of Red Hat Advanced Cluster Security, so ensure you are running a version that requires the update.

Where can I find more details about RHSA-2023:3435?

More details regarding RHSA-2023:3435 can be obtained from Red Hat's official advisory and documentation.