- Issued:
- 2024-01-22
- Updated:
- 2024-01-22
RHSA-2024:0332 - Important: ACS 4.1 enhancement update
Synopsis
Important: ACS 4.1 enhancement update
Type/Severity
Security Advisory Important
Topic
Updated images are now available for Red Hat Advanced Cluster Security 4.1.6. The updated images includes security fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
This release of RHACS 4.1 fixes PostgreSQL vulnerabilities in the central, central-db, and scanner-db containers.
Solution
If you are using an earlier version of RHACS 4.1, you are advised to upgrade to patch release 4.1.6.
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Advanced Cluster Security for Kubernetes | 4 | x86_64 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE | 4 | s390x |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian | 4 | ppc64le |
Fixes
- This content is not included.BZ - 2228111
- This content is not included.BZ - 2247168
- This content is not included.BZ - 2247169
- This content is not included.BZ - 2247170
- This content is not included.ROX-21832
CVEs
- CVE-2007-4559
- CVE-2020-22217
- CVE-2022-3094
- CVE-2022-41862
- CVE-2022-48337
- CVE-2022-48339
- CVE-2022-48468
- CVE-2022-48560
- CVE-2022-48564
- CVE-2023-3446
- CVE-2023-3817
- CVE-2023-4016
- CVE-2023-4641
- CVE-2023-5678
- CVE-2023-5868
- CVE-2023-5869
- CVE-2023-5870
- CVE-2023-5981
- CVE-2023-22745
- CVE-2023-31130
- CVE-2023-31486
- CVE-2023-39417
- CVE-2023-39615
- CVE-2023-43804
- CVE-2023-45803
References
- https://access.redhat.com/security/updates/classification/#important
- This page is not included, but the link has been rewritten to point to the nearest parent document.This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/acs/4.1/release_notes/41-release-notes.html
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.