RHSA-2024:7759MediumCVSS 5.3

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.3 security updates

Published
October 10, 2024
Last Modified
August 26, 2026

🔗 CVE IDs covered (3)

CVE-2024-42459 →CVE-2024-42460 →CVE-2024-42461 →

📋 Description

CVE-2024-42459 — elliptic: nodejs/elliptic: EDDSA signature malleability due to missing signature length check CVE-2024-42460 — elliptic: nodejs/elliptic: ECDSA signature malleability due to missing checks CVE-2024-42461 — elliptic: nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed

🎯 Affected products157

  • multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:1489089b5c904c3977fa3e07b485cac10191a4c123672d3491bff625d45d61dd_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:247632f78d48d729806925dc7adad62c55d22172bac17c7347184469a41b5c6b_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:31802bbc87aba992c2f346a890183dc47d827f112e7d075fd94a80a0dc7f7db5_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:781821157a6b69ae742bdd10f0b3dcd439196ab8e6f01fbf9d65e5245aa99a06_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-image-service-rhel8@sha256:48b0bf06baa6c2a286c1dfd1413f928763a2968acfbb635549dbd33af1c5e8de_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:4f4af0ad243bed97d4b651b54b4969ee5ec8172e1011f69a2ad1d04570474f0f_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:d7e573599b6dd632370dd7b851e4a7eb5d17df2d7236e08f9bfc1fb42b5c14bf_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:d9d1744166e55c3c8d839556f639a2bc568f6ef53f67adc07cf0eb49ccb8914b_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:81859eca374cac4feda02aaf816b2531193b70208ec2896fa656c6471688d66d_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:818a628ac12432f11e572823299f43eeb4a9e5349a5fff90862ed6afd63745c1_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:8e4b6289f95294933fdc1f33ef96b495eafd4007b80613f7b2779ad2a48d94d7_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:ed7f0c8d912169168411cb8809c2d3c238c73764c8773965b3f0e7fd2cea7514_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:5b11dc0b99ca54b95afea28f33b1081004e35a98b8bc9f667a0b71cd93b47549_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:6f8a1b07c62b8bdc3811920b7ff195d7c308e35e3c353b29bb481bf09992e97a_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:a095a98ed226e96255194a6494c0049b274bafe5da77ca3c75c2189e1f47ccbe_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-controller-rhel8@sha256:e9d8c6b76d3af4e240bd21a28268edd1e4b732f5185d47b9d68d94cf32fe41e7_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:3a152a9f2114e8622657e83b69a272d1f983c39291169f83994d407c4ef7ae80_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:3d2c756f64282bc61c56385fd50933d4605722a53302169b8e31e906e0d6422e_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:874754b6d8a777a394ee1ecdf8906cb959e12ffac47a6268d590204687633052_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:e6fb4b60f57345e346844c065db60e23b70ab3ac3d7af27efef8f70213d6efaa_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:0eaf4606b21ce5964618ce990df20f4c5df5a810d8a1d4b1b4e956c417571e37_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:32f0ec874811cae7d22e88b97257cd7bfe866f14e9fe5eb559f3aab3f34c1d06_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:4ff573d5f001c34b80b14f278a94e45159c1e8ddc10b37f72e909ce2680b722f_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-8-rhel8@sha256:ab05eb9aa8879b746c6c1afcf214fb6cab158eee53d7511f7bd6783a72f2e1ab_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8
  • multicluster-engine/assisted-service-9-rhel9@sha256:228c7124544bea919ebbba668b03df8cbeda8cd09187fa6ac5ed70c322107c26_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:4cf18e6935880f0adb1df3e0a5d24e9cb5a3f76f4995b310f206093695438073_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:6ebecf0cf89e41eb4bbdf13dd5426fee9aab05ab828d2bff6b443a256cde8a24_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • multicluster-engine/assisted-service-9-rhel9@sha256:fda52a0b8e396c143dfccc09f53e42b2013786fc3136302ced83eea8004d47af_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9
  • +127 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)