- Issued:
- 2024-01-22
- Updated:
- 2024-01-22
RHSA-2024:0337 - Important: RHACS 4.2 security update
Synopsis
Important: RHACS 4.2 security update
Type/Severity
Security Advisory Important
Topic
Updated images are now available for Red Hat Advanced Cluster Security 4.2.4. The updated images includes security fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
This release of RHACS 4.2.4 provides the following changes:
- Fixed postgresql vulnerabilities in multiple images.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Advanced Cluster Security for Kubernetes | 4 | x86_64 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE | 4 | s390x |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian | 4 | ppc64le |
Fixes
- This content is not included.BZ - 2228111
- This content is not included.BZ - 2247168
- This content is not included.BZ - 2247169
- This content is not included.BZ - 2247170
- This content is not included.ROX-21850
CVEs
- CVE-2023-3446
- CVE-2023-3817
- CVE-2023-5678
- CVE-2023-5868
- CVE-2023-5869
- CVE-2023-5870
- CVE-2023-5981
- CVE-2023-7104
- CVE-2023-27043
- CVE-2023-39417
- CVE-2023-39615
- CVE-2023-43804
- CVE-2023-45803
References
- https://access.redhat.com/security/updates/classification/#important
- This page is not included, but the link has been rewritten to point to the nearest parent document.This page is not included, but the link has been rewritten to point to the nearest parent document.https://docs.openshift.com/acs/4.2/release_notes/42-release-notes.html
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.