RHSA-2023:1887: Critical: Multicluster Engine for Kubernetes 2.2.3 security updates and bug fixes
Multicluster Engine for Kubernetes 2.2.3 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es): CVE-2022-25881 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability CVE-2023-29017 vm2: Sandbox Escape CVE-2023-29199 vm2: Sandbox Escape CVE-2023-30547 vm2: Sandbox Escape when exception sanitization Jira issue addressed: ACM-4346: MCE 2.2.3 images
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1887?
The severity of RHSA-2023:1887 is classified as important.
How do I fix RHSA-2023:1887?
To fix RHSA-2023:1887, update Multicluster Engine for Kubernetes to version 2.2.3 or later.
What are the main issues addressed in RHSA-2023:1887?
RHSA-2023:1887 addresses multiple vulnerabilities impacting the stability and security of the Multicluster Engine for Kubernetes.
Is RHSA-2023:1887 relevant for all Kubernetes users?
RHSA-2023:1887 is particularly relevant for users managing multiple Kubernetes clusters using Red Hat's Multicluster Engine.
What should I do if I am unable to implement the update for RHSA-2023:1887?
If you are unable to implement the update for RHSA-2023:1887, monitor your environment closely and apply the fix as soon as possible.