RHSA-2026:28198HighCVSS 7.5

Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12

Published
June 23, 2026
Last Modified
October 24, 2026

🔗 CVE IDs covered (2)

CVE-2026-32280 →CVE-2026-34986 →

📋 Description

CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-34986 — github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

🎯 Affected products21

  • multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:3ed95ec7f1b73a786424c88dc7866955d5f19f49e1775a2c740f69f46ff5e08d_ppc64le as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:63bc6e818e9ab9a98510e0b504d72e501ef84661eb8797d3855f6f4972c38cd3_amd64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:9ef3c48406b3f84fe06f53dfaeee88a639f240b105456cde69fe2590c091a7c9_arm64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-image-service-rhel8@sha256:a1e13c5fdb5ff0c005fc251189cfab06ea6d70c4de2026df05d2c55bcded18d9_s390x as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:5342ad0704e8f2a25475fe4d6834946fac2ff08756d2c3fdfe3236222152ca68_arm64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:89d0884eb20724d683056df5ac83a00d2be5d855e12254a06f9947a032561a4d_ppc64le as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:c1f584a624b3260c3b67052af94bd3a8cbf0815e9c9e4d10f30f98b2d4d0b8ce_amd64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8@sha256:efc9d2e6c7a1522ab65347b1aaa3df483827895746922816678b3baec8e21ed0_s390x as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:509b1fa604a393d043ead1b2a2920fe3fcf7d7c69dc3c511fd529355db2631f5_amd64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:565199d04120075d6aac136eac7c4dca250f9a5e6c0e5f173fc71f8efe70feaf_arm64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:61eef0913f6362b927cbcb24c50517c9eb61b31f06b0e9625c8324dcfbe1fa83_s390x as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8@sha256:bd695e2f1b29b2e3a06529ff02ccf4d5cb4d7e32d0c12d19b93410d7332558ce_ppc64le as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:40360d7b86529517ca7c60aa6c0a8a0ef0b76c611ffc1d6e614d805aa0530210_arm64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:9fd8223960b7d81cd9ee9b88cff9a34bbeabef20a8ce3ab1ee37dd1d4996a945_ppc64le as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:b1acd167116ab4a24879f0fa4d28623e2c73e3bdd8ef5ed45731484e8f6f26a9_s390x as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-installer-rhel8@sha256:cae5c00f3ee8cffa0402489f5c52f28da6e589579d6ccdae4c013e66c7273852_amd64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:1ea518ad4e63ebc1cae44fa620226e6bd3700d4e629e0fc35e6f4981e2b81662_ppc64le as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:c6e267239da373a86bae4742ac9f477beb9330d655310de13b7c7bdff4cfc402_arm64 as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:e4e2fe376359a3a0433c7f05d804c93ed6d52d18a71b8e5d008db66c8c9058b7_s390x as a component of multicluster engine for Kubernetes 2.6
  • registry.redhat.io/multicluster-engine/assisted-service-8-rhel8@sha256:f7724c7894407c730edd6097bdd391e7dc6cbdf7ce22ee98874bb67702fb6c79_amd64 as a component of multicluster engine for Kubernetes 2.6

✅ Remediation

For more information about Assisted Installer, see the following documentation: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#cim-intro For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.11. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)