RHSA-2023:2061MediumCVSS 7.5

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1.6 security updates and bug fixes

Published
May 1, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-25881 →

📋 Description

CVE-2022-25881 — http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

🎯 Affected products153

  • multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:2ba8092fc432cc94ba0ea678b095a33df448c778d94fa01571c5dfae64631312_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:98454b627e9c815658c1cfba038704c4d89bb4d78c16b4c1775619cab2e61f63_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:a21c5e166866920be2a412d2c08bd9ef8553760b8a40034e87b8b9dd5eea1072_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:d21fdad62f7df1b2e5eaf354e0b655401502583279c05174d8434dde6ef3453e_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:19180636278322fca38bd90db55b6bf9518d4abb7cd1784cf643ffe2959b4c2e_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:6268045b70dd4fdff0f0288c137baea280ab3843257c6fbfed9bdcf22d922dd0_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:caf105892245fe9c4ecef238011043043ff96a2cf8d794bc724e7528aef8cde5_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:dbe7347982b2d406d2f74fa6bb158db87cfe596e056929cfcb963bd99f40f20d_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:8387cefed25c85f6b54f2289d6527eeec4fab0c77a261d2530290e00477a1224_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:97f9a1c4f1bda361446f9603ffcd45373602a58477b6ae218a7f525c70551d55_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:bf224d635e073071e30416c83e99d4739b88f28840dd5b676a8e1c6bd51222ba_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:c4cbc538b1328a0a655705304028b0661b3604a78b144c8f8d513030c2b49faa_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:b69d115b80a241ddafbb30f3db656603aa7d6331e6280c14f65f1aa8aeee5840_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:caae87a97173176e6a187ff83b89b0c4f1bc5a89765d522a66d393854d5b73b3_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:c7c2275db591a8ca9e0533436e0b7a9bce50fe2e48c300541a90214c915ab1dc_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:c8a6eb5dfa2756923ef7c9a0a3df327cd3dc0638befaa9aded4cb0e85062429a_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:d5391922e4092f031bde9769ec183cbb749d7817606029664a09b9d5d7dbae22_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:34a06db52c6f91748add2807fd6710ed902c9575305eb7700131d19327456577_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:ec709f18240d43620463402ef1dcab3882605873933826ee25d931aa0b1a3593_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:f61887d6eb54db692d836c1907bbb3750d7c3a22debf4cf79ff5724268c8ee9f_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:328ccde1b31a90da23ef6514f69083f80c978d9e05f91668f336d6eab825ca47_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:475834b32348bfa96fd9438405c17cd6808d404e3d529fd1c927491505188952_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:c0cf885285ba78e76f5576dac48c0ef99f44a78d0d77b89fb5b34d69a6daad94_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:e358af92c95b49f9bf4214fd65f3d3460ca274ebc10f5386faf9d9459a5b3661_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:32965207c7a6213746571fe36bbe734747127707a2a52685a87ff25e89eec2f3_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:37392a24309c791c68d50dc068cf3fe417f45ef4c335bab27e86f2effdc08030_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:ea4fea19a9d38959f8bbc469ad50bf07e47e365c02bdfa3f607d07556cd9022d_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:f5bec49f84f5558f3beb4faec617ddc294a59083dcca6babfa913e75f9941260_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • multicluster-engine/cluster-api-provider-agent-rhel8@sha256:51c22186968f838925989f4dc7d5b7ea137f49d942d80fdefc92395c000f5aa3_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8
  • +123 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/multicluster_engine/multicluster_engine_overview#installing-while-connected-online-mce

🔗 References (6)