RHSA-2026:28196HighCVSS 7.5
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building
🎯 Affected products5
- multicluster engine for Kubernetes 2.6
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:04df9521988aa3cd05b802347b249a2130e9669137011d82f278229f469f37d4_amd64 as a component of multicluster engine for Kubernetes 2.6
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:5641edbbd65f51364329744829a49081cb132d19a59265d02b9712425b60a0db_s390x as a component of multicluster engine for Kubernetes 2.6
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:bf0d42475dbf268c81cc17107369857e8543d3c2cc3b8b17b4fbc924edef29be_ppc64le as a component of multicluster engine for Kubernetes 2.6
- registry.redhat.io/multicluster-engine/assisted-service-9-rhel9@sha256:e79ce9d741e895906d6ed3411bbe4ef0a286bb689de5a81c47fc7d62bc4c9812_arm64 as a component of multicluster engine for Kubernetes 2.6
✅ Remediation
For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.11.