RHSA-2023:4650: Critical: Multicluster Engine for Kubernetes 2.2.7 security updates and bug fixes
Critical: Multicluster Engine for Kubernetes 2.2.7 security updates and bug fixes
Other sources
Multicluster Engine for Kubernetes 2.2.7 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es): CVE-2023-3089 openshift: OCP & FIPS mode CVE-2023-37903 vm2: custom inspect function allows attackers to escape the sandbox and run arbitrary code
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:4650?
The severity of RHSA-2023:4650 is critical.
What does RHSA-2023:4650 fix?
RHSA-2023:4650 fixes security updates and bug fixes in the Multicluster Engine for Kubernetes 2.2.7.
Which vendor is affected by RHSA-2023:4650?
The vendor affected by RHSA-2023:4650 is Red Hat.
Which product is affected by RHSA-2023:4650?
The product affected by RHSA-2023:4650 is Red Hat Multicluster Engine for Kubernetes.
Are there any references available for RHSA-2023:4650?
Yes, there are references available for RHSA-2023:4650. You can find them at the following links: [https://access.redhat.com/errata/RHSA-2023:4650](https://access.redhat.com/errata/RHSA-2023:4650), [https://bugzilla.redhat.com/show_bug.cgi?id=2212085](https://bugzilla.redhat.com/show_bug.cgi?id=2212085), [https://bugzilla.redhat.com/show_bug.cgi?id=2224969](https://bugzilla.redhat.com/show_bug.cgi?id=2224969).