Red Hat Security AdvisoryRHSA-2025:0676
Multicluster Engine for Kubernetes 2.5.8 security updates and bug fixes
Released 2025-01-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.5 for RHEL 8 multicluster-engine/agent-service-rhel8, multicluster-engine/assisted-image-service-rhel8, multicluster-engine/assisted-installer-agent-rhel8 +3
- multicluster engine for Kubernetes 2.5 for RHEL 9 multicluster-engine/addon-manager-rhel9, multicluster-engine/apiserver-network-proxy-rhel9, multicluster-engine/aws-encryption-provider-rhel9 +29
Fixes 1 record
Priority MEDIUM 53
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03181 · Published 2024-12-11 · Partial fix · 0.31.0 CWE-285
