RHBA-2024:4458MediumCVSS 7.5

Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.5 bug fix updates

Published
July 10, 2024
Last Modified
August 31, 2026

🔗 CVE IDs covered (1)

CVE-2024-4068 →

📋 Description

CVE-2024-4068 — braces: fails to limit the number of characters it can handle

🎯 Affected products170

  • multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:4d75923320520ae50a079b4826553d3e26ab4af96db8eebd722b0b045cbf1115_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:66dcd21acfa311141ff3091f9b0de76ddd0f75dcbd150eca81684333b07c1e15_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:e6b33685a7f242d274a8d68d43f55ffbcd75faa6051e6d75d0d2a1b6782f7363_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:ecca0b1b0c3d626ea102ac8ad3a0e86512b242bb5e80c77e838c73fa2f81f7dc_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/agent-service-rhel8@sha256:b74deaa65316703cde3614fa9ee5f71664f8a9db8f29d5d826e5c5c6e8374273_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:ef20810a211688a0c8ebe28659a45d23c78c8325f87f400327bdffc109e9e802_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:f4d0f675a15d2929f1fddc9d45a4ade0a61394a501ed28bb96fce15accaaa2cc_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:fc1c33a8173a2fbb2235fe78ee0cd269c68a9cffddf1827f93f185e4fd23074c_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:08ad2bab71e6628fc2f9cf04a820f80a333eb93db4fa641b8420c09b006af1bb_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:2f238c6ecb0c8bff9586edb9402071bc834ddd4f27db8cbcba384d63edc58370_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:5a0ad897dca94fe3d64b78defdbe12febcd8f9bf64e80a14b149227d17dbd519_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:8ff28320be2809dabe8e96c587b9a4ea62b19ddbe87ed91df71567aa428f4b89_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/assisted-image-service-rhel8@sha256:500de983fa0fdf7357953795cd77b88a1bd6f9934eabfdf825ee847a2ed27b9c_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:9fa384bc0adab7ba791234560590d31c6926ebf226bee84ea754294b1207b74b_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:c529a92af3df949b762df27ad05a944d73eb30bd480e7cbc852df2cdb79a3b0b_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:d902f882d7537f2c1f1565344e6d030488903d56e57292010ff51414d448388a_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:102d423ee21b40bb0f881f8670d093eecc8cd2517205f768ed12fb22102bce00_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:59a82d2e2f6cc55167634baa6b0451f2da2fe9e8ab637a474fa59f3c203036a8_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:5b6b20d3f1c64320655fca4f6eaca060796c77c767d6bbf11edc439c1c7bad1b_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:76a3e6e50e053c1a07a0152a9949cbc056fe04e7da518e0a8a37ce5531f7f3b1_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:36c06256afc2229d31ecfe928c3f5aa087f3323e529c771bc769dcf603b5b37d_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:4f0205030b6c3857e5e71e032de3b039f033abff889e5585a0c3bc7e66df5a12_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:684afbdb75f6848932d4e2635eff17e9877b4ebfd59e853bc6004b05ae2cff95_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:84f4280600c46f9b935689217fcae280ce7e6669bc5388b1d1298aea84fcf36c_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:1965a657e7101326b65c41b1afc7395b119d773e12ea9740fd304d081f4f684e_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:4d5a88dc4e15b8355acef57ae507fdbcb7ede62d93ff065967540cf040cb3f3a_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:6874c1cf026fd21679bc24761e0565c2bd7a4bb29d333cd7529eb13fcbd6ca22_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:b66aedd62f8860eff543ab356fe697be04ea80bce46b5f3bf8a11a52a341d796_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • +140 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html/clusters/cluster_mce_overview#mce-install-intro Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (3)