RHSA-2025:0778: Important: Multicluster Engine for Kubernetes 2.6.5 security updates and bug fixes

Multicluster engine for Kubernetes v2.6.5 images<br>Multicluster engine for Kubernetes provides the foundational components<br>that are necessary for the centralized management of multiple<br>Kubernetes-based clusters across data centers, public clouds, and private<br>clouds.<br>You can use the engine to create new Red Hat OpenShift Container Platform<br>clusters or to bring existing Kubernetes-based clusters under management by<br>importing them. After the clusters are managed, you can use the APIs that<br>are provided by the engine to distribute configuration based on placement<br>policy.<br>Security fix(es):<br><li> nanoid: nanoid mishandles non-integer values (CVE-2024-55565)</li> <li> golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto (CVE-2024-45337)</li> <li> golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)</li>

— Red Hat