RHSA-2023:4972: Critical: Multicluster Engine for Kubernetes 2.1.8 security updates and bug fixes
Critical: Multicluster Engine for Kubernetes 2.1.8 security updates and bug fixes
Other sources
Multicluster Engine for Kubernetes 2.1.8 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es): CVE-2023-3089 - openshift: OCP & FIPS mode CVE-2023-37903 - vm2: custom inspect function allows attackers to escape the sandbox and run arbitrary code CVE-2023-37466 - vm2: Promise handler sanitization can be bypassed allowing attackers to escape the sandbox and run arbitrary code
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:4972?
The severity of RHSA-2023:4972 is critical.
How do I fix RHSA-2023:4972?
To fix RHSA-2023:4972, apply the security updates and bug fixes provided by Red Hat for the Multicluster Engine for Kubernetes 2.1.8.
Who is affected by RHSA-2023:4972?
Users of Red Hat Multicluster Engine for Kubernetes 2.1.8 are affected by RHSA-2023:4972.
Are there any references for RHSA-2023:4972?
Yes, you can find more information about RHSA-2023:4972 in the following references: [1](https://access.redhat.com/errata/RHSA-2023:4972) [2](https://bugzilla.redhat.com/show_bug.cgi?id=2212085) [3](https://bugzilla.redhat.com/show_bug.cgi?id=2224969).
What software is affected by RHSA-2023:4972?
Red Hat Multicluster Engine for Kubernetes 2.1.8 is affected by RHSA-2023:4972.