RHSA-2023:4862: Critical: Multicluster Engine for Kubernetes 2.3.1 security updates and bug fixes
Critical: Multicluster Engine for Kubernetes 2.3.1 security updates and bug fixes
Other sources
Multicluster Engine for Kubernetes 2.3.1 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es): CVE-2023-3089 openshift: OCP & FIPS mode CVE-2023-37903 - vm2: custom inspect function allows attackers to escape the sandbox and run arbitrary code CVE-2023-37466 - vm2: Promise handler sanitization can be bypassed allowing attackers to escape the sandbox and run arbitrary code
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:4862?
The severity of RHSA-2023:4862 is critical.
What does RHSA-2023:4862 address?
RHSA-2023:4862 addresses security updates and bug fixes for Multicluster Engine for Kubernetes version 2.3.1.
What software is affected by RHSA-2023:4862?
Red Hat Multicluster Engine for Kubernetes is affected by RHSA-2023:4862.
Where can I find more information about RHSA-2023:4862?
You can find more information about RHSA-2023:4862 on the Red Hat Errata page.