RHSA-2024:11293: Moderate: Multicluster Engine for Kubernetes 2.6.4 security enhancements and bug fixes
Moderate: Multicluster Engine for Kubernetes 2.6.4 security enhancements and bug fixes
Other sources
Multicluster engine for Kubernetes v2.6.4 imagesMulticluster engine for Kubernetes provides the foundational componentsthat are necessary for the centralized management of multipleKubernetes-based clusters across data centers, public clouds, and privateclouds.You can use the engine to create new Red Hat OpenShift Container Platformclusters or to bring existing Kubernetes-based clusters under management byimporting them. After the clusters are managed, you can use the APIs thatare provided by the engine to distribute configuration based on placementpolicy.Security fix(es):Backtracking regular expressions cause ReDoS (CVE-2024-45296) ReDoS vulnerability in multiparametric routes (CVE-2024-45813)DoS vulnerability in otelgrpc due to unbound cardinality metrics (CVE-2023-47108)Jira issues addressed: ACM-14853: cluster-proxy addon stuck in state "progressing... mca and work configs mismatch" ACM-15058: detach operation destroys hosted clusters
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:11293?
The severity of RHSA-2024:11293 is classified as moderate.
What vulnerabilities are addressed in RHSA-2024:11293?
RHSA-2024:11293 addresses security enhancements and bug fixes in Multicluster Engine for Kubernetes version 2.6.4.
How do I fix RHSA-2024:11293?
To fix RHSA-2024:11293, it is recommended to update to Multicluster Engine for Kubernetes version 2.6.4 or later.
Which product is affected by RHSA-2024:11293?
The product affected by RHSA-2024:11293 is Red Hat Multicluster Engine for Kubernetes.
Is there any new functionality in RHSA-2024:11293?
RHSA-2024:11293 focuses on security enhancements and bug fixes rather than introducing new functionality.