RHSA-2024:1549: Critical: ACS 4.3 enhancement and security update
Critical: ACS 4.3 enhancement and security update
Other sources
This release of RHACS 4.3.6 provides the following bug fix:<br><li> Fixed an issue where an incorrectly configured Jira notifier causes the Central component of RHACS to enter a crash loop</li> It provides the following security fixes:<br><li> go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients (CVE-2023-49569)</li> <li> helm: Missing YAML content leads to panic (CVE-2024-26147)</li> <li> helm: Shows secrets with --dry-run option in clear text (CVE-2019-25210)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1549?
The severity of RHSA-2024:1549 is classified as critical.
How do I fix RHSA-2024:1549?
To fix RHSA-2024:1549, users should update to the latest version of Red Hat Advanced Cluster Security for Kubernetes as provided in the advisory.
What are the main issues addressed in RHSA-2024:1549?
RHSA-2024:1549 addresses a bug fix for a crash loop caused by an incorrectly configured Jira notifier.
Which versions of Red Hat Advanced Cluster Security are affected by RHSA-2024:1549?
RHSA-2024:1549 affects Red Hat Advanced Cluster Security for Kubernetes versions including those for IBM Z, LinuxONE, and IBM Power.
Is there a known exploit for RHSA-2024:1549?
There is currently no public information regarding a known exploit specifically for RHSA-2024:1549.