Red Hat Security AdvisoryRHSA-2025:4605
multicluster Engine for Kubernetes 2.6.7 container updates
Released 2025-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.6 for RHEL 8 multicluster-engine/assisted-image-service-rhel8, multicluster-engine/assisted-installer-agent-rhel8, multicluster-engine/assisted-installer-controller-rhel8 +2
- multicluster engine for Kubernetes 2.6 for RHEL 9 multicluster-engine/addon-manager-rhel9, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/backplane-rhel9-operator +27
Fixes 1 record
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
