RHSA-2021:1499MediumCVSS 9.1

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.3 security and bug fix update

Published
May 4, 2021
Last Modified
October 14, 2026

🔗 CVE IDs covered (5)

CVE-2020-28469 →CVE-2021-23358 →CVE-2021-28092 →CVE-2021-28918 →CVE-2021-29418 →

📋 Description

CVE-2020-28469 — nodejs-glob-parent: Regular expression denial of service CVE-2021-23358 — nodejs-underscore: Arbitrary code execution via the template function CVE-2021-28092 — nodejs-is-svg: ReDoS via malicious string CVE-2021-28918 — nodejs-netmask: improper input validation of octal input data CVE-2021-29418 — nodejs-netmask: incorrectly parses an IP address that has octal integer with invalid character

🎯 Affected products79

  • Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 7
  • Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:0bb29d1cba22518007974c7bbab7b4617e2ceab585e60c625d24d87502da6b45_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:3560cfe5aa98787496ad1db0440c32a53c9f91ec6bf56fe674b44fcce0913fbc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/acmesolver-rhel8@sha256:223b37b9695d7d6a5228e678a0564c6e10f7adcc49caa77a23ef199462c7e4dc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/application-ui-rhel8@sha256:7d6f9a9edfe8bfaded38f27cb8a0c869a01668971090d2cd0f3117de78722fc5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cainjector-rhel8@sha256:d5be63f07c4edb5dfd7f2a2ced218c1efab961c7df062da7e1d169a84b1be4fc_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-manager-controller-rhel8@sha256:d8c0f16004b3ef5f8ee9fbcaf4480c5ffc0729cb78a69ff4b7fb0fd18fe114ad_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-manager-webhook-rhel8@sha256:6c6c2e1593e7e06bbe68f639df55aa975a40355d2032b2cfcd8f033596465e55_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:07bccd6c99f63fed8fe9ceef648dc2d3a2878ee74fe950d690203bf44de97eec_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/cert-policy-controller-rhel8@sha256:7e9953ca96ed0dbd72dbd1566201bc11c1f8a579c477d684b825813e8b47590e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/clusterlifecycle-state-metrics-rhel8@sha256:7035492ba7af4ac41c14cc47880ed22ac57e818dc28a640ebae78c18ef6921c8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/config-policy-controller-rhel8@sha256:6943e5da86a506bac1397bd532fb2cd550012f1fdf9fb610e196f254b295f014_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/config-policy-controller-rhel8@sha256:9fd81fbad70bccf016b5429f32d03bd16b24acf328b022cb358ccaccaa227512_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/configmap-watcher-rhel8@sha256:8e4eaea9801371aaafa9717b41a4f1ccbde3eaa51c32eb92744f763598b4fc79_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-api-rhel8@sha256:7c6137ec495cbe78b264d52157e702f879ce2e7662dd7dce197d161c32d46f01_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-header-rhel8@sha256:00ea0ba3d5bf31e09f0f7a386cb3cb3bca8d33f98a76f37f79fc9b04f3bc9d7e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/console-rhel8@sha256:1dba9558579be6b3cfa2c9d8ba68b9d773a92280c56e6889a5b6ca2aa64478ce_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-component-rhel8-operator@sha256:9ebec2eded2b5251dcf909334441bf5c2efd20e3781669967ec9f8f787a11be5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-component-rhel8-operator@sha256:b86ea1748942002ec2d6d416565973da705bba3d573025b2c169f41d97c1d50a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-monitoring-rhel8-operator@sha256:0e78ff617e2902e74d1f338e7944959b7c695c8ae169305fda07efd9c4598644_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-monitoring-rhel8-operator@sha256:ec9aad80bdbba16bdcecc048bb4e1f0d8920c77e746287b5a8be4c6e14baad75_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/endpoint-rhel8-operator@sha256:554c7370dc2aeaf7b0745ce851524e1c1d3dd61d79add6937399bbf9cbdcdfcd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-propagator-rhel8@sha256:cd4ae7c17754ab1bd8f252734df840dcca85429948701fc16bcbdbc356c507bf_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-spec-sync-rhel8@sha256:6310565d0f793a3b07d594094fc4e2afd04a8f7046f9ac3f7fabbaea23dda3c6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-spec-sync-rhel8@sha256:911683e6d67f3ae50b9af94c9300260fa031133535194c1cbb0723a686fecd45_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-status-sync-rhel8@sha256:3c48789e9afd3632303b17ea34a4ccf90d371afd0924f12488523d1fa9cea56d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-status-sync-rhel8@sha256:cd6043b006dfbe1937ede2885b0da33521a9eb24b5eb8a169c125bec75fa6b9b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-template-sync-rhel8@sha256:9e433518c82ad8d071753f5708036234e16c3f3f6bd5ba75604246e33a52fc4d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • rhacm2/governance-policy-template-sync-rhel8@sha256:f811455f20a2f2add5c78a57f911a24b8f4b608fd3a2f30864f17e48404fd420_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.2 for RHEL 8
  • +49 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.2/html-single/install/index#installing

🔗 References (12)