RHSA-2025:4002: Important: Red Hat Advanced Cluster Management 2.12.3 container image updates
Important: Red Hat Advanced Cluster Management 2.12.3 container image updates
Other sources
Red Hat Advanced Cluster Management for Kubernetes 2.12.3 images and bugfix updatesRed Hat Advanced Cluster Management for Kubernetes provides thecapabilities to address common challenges that administrators and sitereliability engineers face as they work across a range of public andprivate cloud environments. Clusters and applications are all visible andmanaged from a single console—with security policy built in.This advisory contains the container images for Red Hat Advanced ClusterManagement for Kubernetes, which fix several bugs. See the followingRelease Notes documentation, which will be updated shortly for thisrelease, for additional details about this release:https://docs.redhat.com/documentation/en-us/redhatadvancedclustermanagementforkubernetes/2.12/html/releasenotes/ Security fix(es): golang.org/x/oauth2: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (CVE-2025-22868) golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:4002?
The severity of RHSA-2025:4002 is categorized as important.
Which product is affected by RHSA-2025:4002?
RHSA-2025:4002 affects the Red Hat Advanced Cluster Management for Kubernetes.
How do I fix RHSA-2025:4002?
To fix RHSA-2025:4002, update to the latest version of Red Hat Advanced Cluster Management for Kubernetes.
What updates are included in RHSA-2025:4002?
RHSA-2025:4002 includes container image updates and bug fix updates for version 2.12.3.
Is RHSA-2025:4002 a critical vulnerability?
RHSA-2025:4002 is not classified as a critical vulnerability, but it is still important to address.