RHSA-2024:11381: Moderate: Red Hat Advanced Cluster Management 2.11.4 security enhancements and bug fixes
Moderate: Red Hat Advanced Cluster Management 2.11.4 security enhancements and bug fixes
Other sources
Red Hat Advanced Cluster Management for Kubernetes 2.11.4 imagesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which gets updated for thisrelease, for additional details about this release:https://docs.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.12/html/releasenotes/ Security fix(es):Backtracking regular expressions cause ReDoS (CVE-2024-45296) ReDoS vulnerability in multiparametric routes (CVE-2024-45813) XSS vulnerability via prototype pollution (CVE-2024-4580)1
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:11381?
The severity of RHSA-2024:11381 is classified as moderate.
How do I fix RHSA-2024:11381?
To fix RHSA-2024:11381, update your Red Hat Advanced Cluster Management for Kubernetes to version 2.11.4.
What vulnerabilities are addressed in RHSA-2024:11381?
RHSA-2024:11381 addresses security enhancements and bugs in Red Hat Advanced Cluster Management for Kubernetes.
Is there a need to take immediate action for RHSA-2024:11381?
While RHSA-2024:11381 is moderate, it is recommended to apply the updates to ensure system security.
Which product is affected by RHSA-2024:11381?
The affected product for RHSA-2024:11381 is Red Hat Advanced Cluster Management for Kubernetes.