RHSA-2024:10179: Important: Multicluster Engine for Kubernetes 2.3.8 bug fixes and container updates

Multicluster Engine for Kubernetes 2.3.8 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es):nodejs/elliptic: EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended (CVE-2024-42459)nodejs/elliptic: ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero (CVE-2024-42460) nodejs/elliptic: ECDSA implementation malleability due to BER-enconded signatures being allowed (CVE-2024-42461) Missing Validation in Elliptic's EDDSA Signature Verification (CVE-2024-48949)

— Red Hat