RHSA-2023:2098MediumCVSS 7.5

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.8 security updates and bug fixes

Published
May 3, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-25881 →

📋 Description

CVE-2022-25881 — http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

🎯 Affected products145

  • multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:97953db07d72c8c9bc4a02d9d9828e0356564ae077a5627008cd935eacd3c431_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:cdeac0e0e24681815d84fa4adcdba1ba6f58e13eef2ba40e339d925b9d6e31ac_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:e23fd8486bb6d5a855c19fa5c6deacc4b618050b24682a39e43c72b54d477259_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:e9db5bbb914fc5acb2fd4043fe080871137efa7898076978e6760d066cb6e3ae_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:1059dcf0baa10711293d1a68e2cf94007700c10ae766108e4516363d7719b053_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:2e08cfabf6782aa509b30121ba3ec0c892bc72561623389b79c0913d92f6e7cb_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:45980a82d18011f10fa1359ee4f8bb58f1d733945c95c05c65cf9ed27ffc7711_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:ca21d47df9252c588ac3b62ee4c9c316dd78841f4c01370d000a82b4bf6989d4_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:010f4302c1a117c4b6acec689dc4b3e163a7aa8248a8cb404ea798332e763a2d_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:528c1beba81ee8df1d285d6a6247aa9d5e015e3383b3df24069a953a13ae6af4_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:8b80abdec9e38c0cc9bf194bd5258ec64eedd989f9d6cd1c9d5abc2c553e1496_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:d2553de872868aca142da2831e08e9ad8d59cebda44460e0c0f8fdb6554e8f7a_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:1efe34c3f8b6303b397c74ddb2b43ac782dfa5bce69108eedd6b6122ced14601_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:5625b33a8e26fa2531a5da42151b8cda7592c6f4252d4b5d1b81e2a822509634_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:6c652ca955753d38ae8001a96a7566f9fddeda7dafb539c5690ef9e59dba5898_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:c91750d80bda566c0ec42de51da726ee12639011c5d20f407b9b1aeaaf580735_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:f3550478f1c5c94c40e14fb621238cdaa2a774cb20ca5c5a7b396c525bb7b119_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:0124ef35b82f022c1067926e82c8d5b87dbecd9faaacf95222a971489f3cdbc7_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:3931b8f7b46b45cd03e3fbfbe086096ba314a03a764f2a2793c1c6296f976c4f_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:963dfc99b824553e6d824e9e82f01771b6f9418e0e0e7d12cb63400ce20d1a18_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:3012a831579eea8ad086e93891425e69dc0032085bd1b27241ab365ff6eaeef9_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:71850057b0538d3b2e2279e4db976feeffc6250f02027ad7063236369f63407f_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:b390f8ad0a6300897c423ccf7a3b5b5ccaf0376f7db41433db04e02f94c6450b_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:eb1387b820c9de595a0e7fb85ead887fcb75ea5fda6bfd786ff4e4985421dd3d_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:5696b46bc8706b1774816a604686d7f86314fa75e213e208e6866aa3e0b9c07b_s390x as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:66f04ea3ac06850f613a425ea8187e3239ef2ec1b75f5ace99ee02586ae8d58c_amd64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:6eed5640e54dcf316b7066be74a7e4d3ba5518104806b9889c4602c8314141bc_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/backplane-rhel8-operator@sha256:a0a3320c90275244b8bca4e4498b86ebc1a3686d7087af20929231788699459a_arm64 as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • multicluster-engine/cluster-api-provider-agent-rhel8@sha256:1ff75eb0b4b315560e6c78cf71cad13a09e43b8017c269071389a65e93b99057_ppc64le as a component of multicluster engine for Kubernetes 2.0 for RHEL 8
  • +115 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html/multicluster_engine/installing-while-connected-online

🔗 References (4)