Red Hat Security AdvisoryRHSA-2024:5955
Multicluster Engine for Kubernetes 2.6.2 security updates and bug fixes
Released 2024-08-28 · Red Hat rating Low · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.6 for RHEL 8 multicluster-engine/assisted-image-service-rhel8, multicluster-engine/assisted-installer-agent-rhel8, multicluster-engine/assisted-installer-controller-rhel8 +2
- multicluster engine for Kubernetes 2.6 for RHEL 9 multicluster-engine/addon-manager-rhel9, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/backplane-rhel9-operator +31
Fixes 1 record
Priority HIGH 72
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02761 · Published 2023-06-21 · Partial fix · 7.5.2, 6.3.1 +1 CWE-1333
