This advisory covers container image updates for Red Hat Advanced Cluster Management (ACM) for Kubernetes version 2.10.8. It fixes two security vulnerabilities: CVE-2025-22869, a denial of service vulnerability in the key exchange mechanism of golang.org/x/crypto/ssh, and CVE-2025-30204, which allows excessive memory allocation during JWT header parsing in the golang-jwt/jwt library. The update addresses these issues by updating the affected container images. Red Hat rates the update as having an important security impact. The advisory does not provide a CVSS score but references the CVEs for detailed severity ratings. No exploits in the wild are currently known.

The vulnerabilities fixed in this update could allow denial of service conditions via the SSH key exchange process and excessive memory consumption during JWT header parsing, potentially affecting the stability and reliability of Red Hat ACM for Kubernetes deployments. These issues could disrupt cluster management operations but no active exploitation has been reported.

Red Hat has released updated container images for Red Hat Advanced Cluster Management for Kubernetes 2.10.8 that fix these vulnerabilities. Users should apply this update after ensuring all previously released errata have been applied. No additional mitigation steps are indicated by the vendor advisory.