RHSA-2026:22268HighCVSS 7.5
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.11.2
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
🎯 Affected products21
- multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:240c2cef0fb030eab862e126582f17d611ae0af86761e1bd3ac5c7e6cbe957f6_amd64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:5a280accb1fa857d4cc70a11f4adc0734cccd7bf0c430211a8271b03e6fb8c4b_s390x as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:72e0250d239399e9c9d3a6d520144a3fece3525c16900c3626a43050d9e36065_ppc64le as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:cba3abaa642778ac075083eee2f3b7be32d00e38865b7626a52613e50bfb3b64_arm64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:188aef7eac5a0fc52d13d116b68129257ee6b2ef3659a72325aa579b773bd180_s390x as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:2d0bae5716ae90f260522ec181eeeb214bd244f11705309bcc0d1663b86d42df_ppc64le as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:46d2b40907bedcca3a444920c33d7398a481d6321886a42ac8b5573ccf6be362_arm64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:67e144e58d42b936c0a0fb3bf9ea155e54fbb3d208df538bc701da8252b54367_amd64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:230ae99c97005f071eff0f292c39602bfbf5f529e138c61cc02a863dedde2990_amd64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:30ace9f84abf5a77637474d4521f027c0850ea2f94cfb0221b3bd528b5a2257d_arm64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:33d3b5ff3c0707067dc25c301c2ba0507fd87284b2ca2b0d90c9086155666cbf_ppc64le as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:e91825acb3f57275633dad65e78b1a1d24523a9020848b8c45563ae68c16f35e_s390x as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:01340581dc3d52424f8c315a8348ace09750e79d02763ab156b9df209b37c40a_ppc64le as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:03e9dd3d7aa259e38936596b8645a4a4a24f2ab432b0b0255543ec4f6f964794_arm64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:7a9075ce458efc08c71544731cfbf02aa31713143f413fe18e044133c1f42b8d_amd64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:e01bede648ea6294f65c9111ad62ca0efc93a426e36e3e341bbdd03ce0fa73f0_s390x as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:123096ce97e8bcf242bb1c99b003abf2daa400a3d046568556c69f4f09b13fe7_s390x as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:3c66547641708220be348d6eb2e5c0eef33c36d39987964e4dbd130ce2b63694_amd64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:9930d9200b2e54b173c129dfc27dedde7d9921cc67383b059516be3074bf2901_arm64 as a component of multicluster engine for Kubernetes 2.11
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:d2e67dfff2b183eaeb15ce21e4fa44b38379c959fcc0d6cd3b94a8d948104edb_ppc64le as a component of multicluster engine for Kubernetes 2.11
✅ Remediation
For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.16.