Lucene search

K
redhatRedHatRHSA-2024:1321
HistoryMar 13, 2024 - 8:53 p.m.

(RHSA-2024:1321) Moderate: ACS 4.3 enhancement and security update

2024-03-1320:53:28
access.redhat.com
12
rhacs
bug fix
security update
pgx
sql injection
cve-2024-27304
cve-2024-27289
upgrade
crash loop

7.7 High

AI Score

Confidence

High

0.962 High

EPSS

Percentile

99.5%

This release of RHACS 4.3.5 provides the following bug fix:

  • Fixed an issue where an upgrade to RHACS 4.3 from a previous version caused the Central component to enter a crash loop.

It provides the following security fixes:

  • pgx: SQL Injection via Protocol Message Size Overflow (CVE-2024-27304)
  • pgx: SQL Injection via Line Comment Creation (CVE-2024-27289)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.