RHSA-2024:6708: Moderate: ACS 4.5 enhancement and security update
Moderate: ACS 4.5 enhancement and security update
Other sources
This release of RHACS 4.5.2 includes the security fix for the following CVE: containers/image: digest type does not guarantee valid type (CVE-2024-3727) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.This release of RHACS fixes the following bugs: Fixed an issue where Sensor was unable to identify OpenShift Container Platform internal registry secrets due to a change in the pull secret annotation. Fixed an issue where policies incorrectly displayed an enforced value of Yes in the Configuration Management -> Application & Infrastructure -> Deployments page due to inconsistent status handling, while showing No in the Violations page. Fixed an issue where vulnerability data differed between the Vulnerability Management Workload CVE pages and the deprecated Vulnerability Management dashboard due to inconsistencies in vulnerability reporting.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:6708?
The severity of RHSA-2024:6708 is classified as moderate.
What issue does RHSA-2024:6708 address?
RHSA-2024:6708 addresses a security issue related to the digest type not guaranteeing a valid type, as outlined in CVE-2024-3727.
How do I fix RHSA-2024:6708?
To fix RHSA-2024:6708, you should update to Red Hat Advanced Cluster Security for Kubernetes version 4.5.2 or later.
Which products are affected by RHSA-2024:6708?
Affected products by RHSA-2024:6708 include Red Hat Advanced Cluster Security for Kubernetes and its variants for IBM Z, LinuxONE, and IBM Power.
Is there a workaround for RHSA-2024:6708?
There are no documented workarounds for RHSA-2024:6708, so applying the update is recommended.