Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:3435
HistoryJun 05, 2023 - 9:19 a.m.

(RHSA-2023:3435) Important: Red Hat Advanced Cluster Security 3.74 for Kubernetes security update

2023-06-0509:19:59
access.redhat.com
8
red hat advanced cluster security
3.74.4
security update
kubernetes
cve-2023-24540
golang
cve-2023-24539
cve-2023-29400
cvss score
references section

0.005 Low

EPSS

Percentile

76.2%

JSON

This release of RHACS 3.74.4 includes a fix for CVE-2023-24540 by building RHACS with updated Golang.

Security Fix(es):

  • golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

  • golang: html/template: improper sanitization of CSS values (CVE-2023-24539)

  • golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)

For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the links listed in the References section.

Related

redhat 25
mageia 2
nessus 52
ibm 14
openvas 22
amazon 4
altlinux 1
photon 2
f5 1
freebsd 1
ubuntu 1
osv 15
ubuntucve 4
rocky 1
almalinux 3
prion 3
cvelist 3
hackerone 2
alpinelinux 4
cbl_mariner 11
nvd 4
oraclelinux 4
gentoo 1
cgr 3
redhatcve 3
debiancve 3
cve 4
veracode 2
wolfi 2
cnvd 1
redos 1
redhat
redhat
(RHSA-2023:3379) Important: Red Hat Advanced Cluster Security for Kubernetes 3.73 security update
2023-05-31 11:14:52
(RHSA-2023:3415) Important: ACS 4.0 enhancement and security update
2023-05-31 19:31:02
(RHSA-2023:3609) Moderate: Red Hat OpenShift Data Foundation 4.12.4 security and Bug Fix update
2023-06-14 21:17:43
mageia
mageia
Updated golang packages fix security vulnerability
2023-05-16 22:17:40
Updated libarchive packages fix security vulnerability
2022-12-14 01:09:19
nessus
nessus
Amazon Linux AMI : golang (ALAS-2023-1760)
2023-06-09 00:00:00
EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-2583)
2023-08-08 00:00:00
CentOS 9 : toolbox-0.0.99.4-5.el9
2024-04-26 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator vulnerabilities
2024-02-20 19:45:04
Security Bulletin: Multiple vulnerabilities in golang affect IBM Db2® REST
2023-06-07 15:44:22
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by multiple vulnerabilities in Golang Go
2023-07-26 20:48:02
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0169)
2023-05-17 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2583)
2023-08-08 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2613)
2023-08-08 00:00:00
amazon
amazon
Important: golang
2023-06-05 16:39:00
Important: golang
2023-05-25 17:41:00
Low: libarchive
2023-09-27 22:49:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.9-alt1
2023-05-03 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0387
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0575
2023-05-05 00:00:00
f5
f5
K000138679 : GoLang vulnerabilities CVE-2023-24540, CVE-2023-29400, and CVE-2023-29403
2024-02-21 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
ubuntu
ubuntu
Go vulnerabilities
2023-06-06 00:00:00
osv
osv
Moderate: curl security update
2023-05-09 00:00:00
Moderate: curl security and bug fix update
2023-05-16 00:00:00
BIT-golang-2023-29400
2024-03-06 10:55:58
ubuntucve
ubuntucve
CVE-2023-27535
2023-03-20 00:00:00
CVE-2023-29400
2023-05-11 00:00:00
CVE-2023-24539
2023-05-11 00:00:00
rocky
rocky
curl security and bug fix update
2023-05-18 19:18:14
almalinux
almalinux
Moderate: curl security and bug fix update
2023-05-16 00:00:00
Important: go-toolset and golang security update
2023-05-25 00:00:00
Moderate: curl security update
2023-05-09 00:00:00
prion
prion
Authentication flaw
2023-03-30 20:15:00
Input validation
2023-05-11 16:15:00
Code injection
2023-05-11 16:15:00
cvelist
cvelist
CVE-2023-27535
2023-03-30 00:00:00
CVE-2022-36227
2022-11-22 00:00:00
CVE-2023-24539 Improper sanitization of CSS values in html/template
2023-05-11 15:29:38
hackerone
hackerone
curl: CVE-2023-27535: FTP too eager connection reuse
2023-03-05 21:25:18
Internet Bug Bounty: CVE-2023-27535: FTP too eager connection reuse
2023-03-20 07:38:58
alpinelinux
alpinelinux
CVE-2023-27535
2023-03-30 20:15:07
CVE-2023-29400
2023-05-11 16:15:09
CVE-2022-36227
2022-11-22 02:15:11
cbl_mariner
cbl_mariner
CVE-2023-27535 affecting package curl for versions less than 8.0.1-1
2023-04-16 00:48:11
CVE-2023-27535 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
CVE-2023-27535 affecting package tensorflow for versions less than 2.16.1-1
2024-04-17 22:02:46
nvd
nvd
CVE-2022-36227
2022-11-22 02:15:11
CVE-2023-29400
2023-05-11 16:15:09
CVE-2023-24539
2023-05-11 16:15:09
oraclelinux
oraclelinux
libarchive security update
2023-05-15 00:00:00
curl security update
2023-05-17 00:00:00
curl security and bug fix update
2023-05-25 00:00:00
gentoo
gentoo
libarchive: Multiple Vulnerabilities
2023-09-29 00:00:00
cgr
cgr
CVE-2023-29400 vulnerabilities
2024-05-19 03:07:16
CVE-2023-24539 vulnerabilities
2024-05-19 03:07:16
CVE-2022-36227 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2023-27535
2023-03-21 13:13:39
CVE-2023-24540
2023-05-08 09:52:44
CVE-2023-29400
2023-05-08 09:53:02
debiancve
debiancve
CVE-2023-27535
2023-03-30 20:15:07
CVE-2023-24539
2023-05-11 16:15:09
CVE-2023-29400
2023-05-11 16:15:09
cve
cve
CVE-2023-29400
2023-05-11 16:15:09
CVE-2023-24539
2023-05-11 16:15:09
CVE-2023-27535
2023-03-30 20:15:07
veracode
veracode
Code Injection
2023-05-14 11:44:02
Authentication Bypass
2023-03-21 00:27:47
wolfi
wolfi
CVE-2023-24540 vulnerabilities
2024-07-03 09:08:38
CVE-2023-29400 vulnerabilities
2024-07-03 09:08:38
cnvd
cnvd
libarchive Code Execution Vulnerability
2022-11-24 00:00:00
redos
redos
ROS-20221216-01
2022-12-16 00:00:00

0.005 Low

EPSS

Percentile

76.2%

JSON
Related for RHSA-2023:3435
redhat25mageia2nessus52ibm14openvas22amazon4altlinux1photon2f51freebsd1ubuntu1osv15ubuntucve4rocky1almalinux3prion3cvelist3hackerone2alpinelinux4cbl_mariner11nvd4oraclelinux4gentoo1cgr3redhatcve3debiancve3cve4veracode2wolfi2cnvd1redos1