RHSA-2024:5955LowCVSS 7.5

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.2 security updates and bug fixes

Published
August 28, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2022-25883 →

📋 Description

CVE-2022-25883 — nodejs-semver: Regular expression denial of service

🎯 Affected products157

  • multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:28bc6bf67308e3a9d672602b2c01767c80f6b821c458c2d3d933869741ac879d_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:a5cb6bff2d64bbebc5ddcc2cc44481acf545e92cf52b4acf28588e64e2f33d7d_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:d6533bb8ee76ebc8554d086c5a9e802d1507e12b7d75c98692978421f743c903_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:ed2070762f058659c7c57b96aca27ab0929dadb992c1478a4fe40f2cc46056eb_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-image-service-rhel8@sha256:6c97acea30e0679b19b2d9b43c3a09f72571dfc28e5f736fe0299ab69014a6b4_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:b7c150e874c43418d35091154f768906eb0ad8dd3ed509465922c6ebb345769e_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:c10d4e4efda73c7c1867a13391e03d408762f1069a0c2a86375d9343b36f5410_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:e45632049ee5e501773b03c3beaed3acc0e5d7345f8d816bbaa90192b12df724_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:0536793606065e327247ec850df060260246ea101985e62604dd5eb7c41f40b1_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:319f7238c812e6ccf020f3b665f88f8236a51ac7740b9d974b50110d7566dcda_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:520fd8238e60409bac8656b1b145ac5c91d20592965dbebdf8563a5129afe4ef_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:ab2d453fc966ddbc6a1a5012b5f70e4be84cd1de739c8b6789ff58288042daec_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:3ae4da39ce451793b88d2aaf68a963273642ca967189e477820ac4bf3db3718d_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:521143779c55b600e9473b24ffb1361672d5d5cbaea2a22a5564645fd3437ec0_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:737eb30b5ae839e6670cc26303b660b0875ae1eeed6438eae1ff03ed1e011bdb_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:eb939c5a630413bcf64f633801a65b9c921f4357ac41ddf52492bbb827957c66_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:2b6ac6ac869393a975f18d57b8b672ce5fb44227c70a1ee9b4c3e9a45b66cf58_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:3d7e94bcd1ea27ebb3c786053a53ff6c5b280b666996378f446ef3b5a045b09f_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:be8d9a854480bda62e5aee71c629139ab73560f0b4020c562b9865012202c0ec_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:e7a270f405cbfe594680d7103b8a59b1de442e65fc6c70590b735b0acd24edc0_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:4ccdd963c97fab0d30058433ba1aad54a69dc9965b57f0f117b7885ca495aedd_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:b1aa30670a0169ff6833fdfef04f383177aa19d2805a361d848e5196f2d4dad9_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:bb8ce76de216a8cc25d59bf8e7605efc298f2a198c60324ba17cdf89be20b6c1_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:c45da32cba975301e6bae6a68a07b89776309e2933c493b3d31adcf01e102273_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-9-rhel9@sha256:35327c34974a9a064195116403c8c3bf725e0866973c94bf326b73d91d0560c1_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:5c4eac14e5fcdfa079d848501011bcc65a0f5fe056380ab5fa7ae89bac2796ed_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:69ed5692ef73bb6f700889df40d300aeb4d5b931b24d5b267dfc1a3ae81591e6_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:d30f0114dcbcf436bc2063894aeef28767640950fe8836f275f4d15912f22c13_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • +127 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)