RHSA-2026:22415HighCVSS 7.5
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.17.0
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
🎯 Affected products21
- multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:73e2fa81283566d7a7e815c478924e54a53ebb4392f253b14f16a62667bcdf45_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:a18381897205dbbcc7d0f703baffd77ff9102f1b5a9da60bf7ca1006a8f9c0b1_ppc64le as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:dfc63b1ac74fd0d568a1aa513376a741f909f62276edcb28981ad7b82ce25f2c_amd64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-image-service-rhel9@sha256:f3856351a9827a63ca2548b4fa1b6a8206b75635957d597d610582d99ceb2d7a_s390x as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:10be9fbec807b14c4d2ed0ef68ce01fe9125aac57698a550f6049d0e32a83f10_amd64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:34941086cc098a607cd45114365ab8e68bc78a41c4f7f521f9ed44f27176ad64_s390x as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:60db01bae2dc9030f74814c4d6cc57216a2279bf1e752fad0c44a3e5c81da813_ppc64le as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9@sha256:c951d1a079c70504858aa384c3ee07a68375ce363585803e9630ede6e64b85a5_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:285635963834911b48abffd3aad1d015ee6da0d00fb97fbef05a2acf40e77d6d_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:3a5a26c81fbb9eaf7d5d9e32faada021f2506cfa50a484193ac6f7a6e6ef7240_s390x as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:85a2360a2e9f396e77762b548e2b82e1e0b6e98ae28e4ca64232e0578b142bc6_ppc64le as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9@sha256:f36031392780c050379ee53334d5638dc511a27e71b1e9f29edb829967b64816_amd64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:434b787c46060337e557b0f9d4907ea7939ce393c7e136292a84889da9e2c684_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:9ba60d6db6847b79dd273e5c6cda79bc7df146ca78694b489e516b2bcded3af6_amd64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:aaaa3ebb03fa81569ac24b1e9067b1a15375532d738a04034425fd0be7cc1760_ppc64le as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-installer-rhel9@sha256:cb8f70ddcd8943a4aad7d8c35672f01d7826c312b9634b6abf51ddea804c0f13_s390x as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:246f0c4c5ed0596046e0e1a182e95f839e3c60ea70626dd4dbc96dbfa9f420ef_ppc64le as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:5378a1adb83ce50d43a2144472902bf6ad653e00004c611254e1e990f6cba9f5_amd64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:6ff63c0f7b566a1d05ffcc9cf3dd634770f029acd4a00c28827013ccb5f5a864_arm64 as a component of multicluster engine for Kubernetes 2.17
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:e9372558816be2996ec2a19f1e1af322132022d5021922ef8073e2cd337ea9dd_s390x as a component of multicluster engine for Kubernetes 2.17
✅ Remediation
For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.17/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.17.