RHSA-2023:5421: Moderate: Multicluster Engine for Kubernetes 2.3.2 security updates and bug fixes
Moderate: Multicluster Engine for Kubernetes 2.3.2 security updates and bug fixes
Other sources
Multicluster Engine for Kubernetes 2.3.2 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es): CVE-2023-26136 tough-cookie: prototype pollution in cookie memstore CVE-2022-41721 x/net/http2/h2c: request smuggling CVE-2023-24539 golang: html/template: improper sanitization of CSS values CVE-2023-24540 golang: html/template: improper handling of JavaScript whitespace CVE-2023-29400 golang: html/template: improper handling of empty HTML attributes
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:5421?
The severity of RHSA-2023:5421 is medium.
What does RHSA-2023:5421 address?
RHSA-2023:5421 addresses security updates and bug fixes for Multicluster Engine for Kubernetes 2.3.2.
What software is affected by RHSA-2023:5421?
Red Hat Multicluster Engine for Kubernetes is affected by RHSA-2023:5421.
How can I obtain more information about RHSA-2023:5421?
You can find more information about RHSA-2023:5421 at the following link: [Red Hat Security Advisory RHSA-2023:5421](https://access.redhat.com/errata/RHSA-2023:5421)