RHBA-2024:1775MediumCVSS 5.3

Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.2 bug fixes and container updates

Published
April 10, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2024-21501 →CVE-2024-28176 →

📋 Description

CVE-2024-21501 — sanitize-html: Information Exposure when used on the backend CVE-2024-28176 — jose: resource exhaustion

🎯 Affected products170

  • multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:1393ba338e07f2be3d3689fa5c31e0155900750662f1e49baf4e16357c719efd_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:16b7661bab20ec802d460360b02926d35406bde7437beb9b8f096782a259e9dd_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:3ff238a5427550cc54fd4f9a5d560f142b6d91e165354ab19bfba7ea2531c042_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/addon-manager-rhel9@sha256:a26432d28df6ba7f57f860fb4df0a8701634c0a6ddadf84a02f71e45833a4d8c_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/agent-service-rhel8@sha256:03c472dbb1b9bafa49e45ef6263ea414efb10971564033750aef2caec4099f75_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:3241064df58c39045668029b8e305a93e4c8f5d42c031c98104c33e9b3e39d72_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:891b5962bd509bd04bb4bd430811b042febc0c38c25bada9fe1d5cae372aa26b_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:e863ee09b965ce2344f9bf292bce9564b740424c688092cf47509741e8678f74_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:0377a2b71d786269fa5a27886093b1ecc3de41ceb57a9ccb1f3ad11b61742786_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:0afa779ea67a89a1fbc68e94c5f55916d14035dc4b2aba2403fef8ae9bd83402_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:5e250e9733c5c2cdbd7994b5e6e47aa86d17478f3dcc5619ced8a8d91508a882_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/apiserver-network-proxy-rhel9@sha256:7e389028d68d156c04c99cb6f180b3d84e2839aa1acfe9dfd40e9d282ee0096b_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 9
  • multicluster-engine/assisted-image-service-rhel8@sha256:601cad2e1045f9a4ff34cfe8b0503b9e348a9605569b94fcb9d0c0337db6d03e_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:7c2aa0a552c888b6dcfd3609fdf97381daedf1e1e9fe92930d2aab9955e23e5b_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:8a09843163bc819b0c26a189f2be428af7ec209f8d1a3f8c59351dc0860fca4e_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:fa3278de3d24ee24b2ddca0a3615b397a3165490e74f5cda8f82856cf2847436_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:0df4b01daebefd4b03c7d38561496fbf64fd2ed2e0da3fbb1881088c0509dcdf_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:51c62423a2356cb12e191cf46bb2bbd86b6eab92575a491df495b092c0b98d42_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:a919beadf992aa5c204e65f3a9b8ac84562343d18acbbc96ae19b34165eb25dd_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:c331cfd195a3c1debcfe5f7449cfdd670e5283b5f929fa1df5a867cd2d5400e9_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:6073161d65d4028d5ca1a93868d969d8b9a462056fcd03e43e8f4a37c1be3c18_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:65e33a639f79997594da640626201360d40bf7e4191992170d97dcd116c7a2a5_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:8c82bdb804da9508834050faa84b046f14a82ae02c498c388365f0f9811163e5_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:aa1f68ddc8caa287d5d375382237aab3c01f9029729d4f256eb38404833715b0_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:13705553b8b89d5257a45408964dbf491c1ed4f1f240a3e82cffb7bbeb727e99_arm64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:21b11f0d0c35aa3281ae708888ce3184e389288066ebb141a44999ee0216d308_s390x as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:23672a2e1c838ebad0103fe32355e99e478a88218f9826df3fae4b416e1f0ee1_amd64 as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:d966537aa195e1eb0bf1e750f995e34365f617f985bd503c9189522a0576f966_ppc64le as a component of multicluster engine for Kubernetes 2.5 for RHEL 8
  • +140 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html/clusters/cluster_mce_overview#mce-install-intro Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (2)