RHSA-2026:47735

Vulnerability from csaf_redhat - Published: 2026-07-29 07:36 - Updated: 2026-09-28 16:45
Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.9 security update
Severity
Critical
Notes
Topic: Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.

CWE-306 - Missing Authentication for Critical Function
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Critical

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.

CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

CWE-606 - Unchecked Input for Loop Condition
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).

CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-25681
Known not affected 104 products, the same list as for CVE-2026-25681
Threats
Impact Important

A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.

CWE-1341 - Multiple Releases of Same Resource or Handle
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.

CWE-281 - Improper Preservation of Permissions
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.

CWE-1284 - Improper Validation of Specified Quantity in Input
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.

CWE-772 - Missing Release of Resource after Effective Lifetime
Affected products
Fixed 4 products, the same list as for CVE-2026-25681
Known not affected 104 products, the same list as for CVE-2026-25681
Threats
Impact Important

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

CWE-476 - NULL Pointer Dereference
Affected products
Fixed 4 products, the same list as for CVE-2026-25681
Known not affected 104 products, the same list as for CVE-2026-25681
Threats
Impact Important

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-39828
Known not affected 104 products, the same list as for CVE-2026-39828
Threats
Impact Important

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-39828
Known not affected 104 products, the same list as for CVE-2026-39828
Threats
Impact Important

A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:7338fb8555f365209261720c6807d2346a780aa13e8e6201d635b9b8876f7cc0_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:8d8f0e912e141d139dc8fd0e28a94ad4c39d38c3473b7f8f2c8b3a27952b595e_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:a73c2f346f8d279568e9a35b0ed5c330c1804dfa130264837cb566f52a59899f_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:b3b2d1688a3d1d28cf5a7c08e4fe11e14787021dbd89ca5867d719b8b4a76e4b_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:5a0702c3c3d088bb774c5b0e9cc2e48d92581d33a10446a05f18c72f6df837b9_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:67d425c91a8e56db535778086bff18efe33d90ee10ceb4e4c2a3dc713123e7f1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:9a403df05958e9063415fe0e84d7a7ac9d9facb026472ab33f56fa59308c692a_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:c6aecc60f95e292897ac5c337ac8cde89828d7d0148b1b9f05bb75ae3d9d47f3_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:4a6e8639ee3e5069f2aad866acbf03994fc3a9d668ff10e9bc7997b56ceb1609_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:5d0bc8f34248f3ebb74910b9b7f2d3a9627f44c7b436fd1b5c195c40e2dbf6db_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9d35d186e2f8744c7f160fdd95448f8d74e29a705fe0d59809611388a6a2f2a9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:f5eecd0d2aae93c09dc7a9d9c9c21be6bb1b9414b532787c851d0074dece3af1_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0949c13d5ebfe48cf1c9883e545dfd80a9f1d2b065aa71b0eca2699028208187_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:304eeab66005c5712deb46cc48de5f0f19f79b21629364f72340351edb8768e0_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d9b878dbf396a18cf7cfc29ce96fb0f55225fada969c14d4503944f2af6066df_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:debf14c25cc30f66440e329131fba3d2ac2e9cdc71b8fa293cdcec7ada7ef386_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:45f0787d5edd242ba4ef205975a085bc405d9e2a791ff2eb9f85fe7040646595_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:512d5d7f218a81bcb9469cf187ffc4731a6da970a525376e201ac5263d5af331_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:7dd351693ab329a2f34cd3b081f6232aee512034bbdb8dc4c46b6cf3e2293d53_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c7e0ada1136dcc9dd8e2d5a5b65b9faccbf4c594d9131d3a6e32e1c5f8fdeec0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1b511bf48e2d14e6512bacd2f25e3446e617eff32cc4fdc0d0f0934ebd2274f6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1f42aea03c5fa6dc65d4ab39bfc4fd02b302f2432f14dc24af76e53d22441a06_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:3cb716d71347eb7c6bfb462b2186a8052c99df5a6676e47602b998e1990ce960_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:bcc7da879cd2b6b13b76ad1ea8fe8720582b609121bd3a45d3c60d97a6d3403f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:72510993f9a641fb4757820784cdef1f1686e3d13a53f3582d8effce6152e0a2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:d882a6916930992429f816cfca119f46076403c61bb436550be70c05b7ada8e9_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:ef0e88f2715e347a15c0bb9e0f66ac28eb315c69a8016ddfa117193c3e79155b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f9ff88db707a5dd40514f7fcaabf2113dd1821049c62b921b4d1b0478ef25880_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:2c197ed8c197d27d7b57364130c9a15b9c60e7b13163909e3ebf00db8f321ffe_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:6e59fb4a06394dac0a0b30568c80380a1e0dc2bb0f1af3cbfdc9666814c77a55_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:72f91b33bcbdfa76f08c9291f79a964bba6685df0680bed4f5b3a5b74e35fc2f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:bf94211e48693b7e233b75f05f7e3d2370da317fd2b6a46ff7e96c752c61935b_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:43b0023994c97622c4777d1a41ed26b2d8e5136c80d58cbb73d9405f37c8c9f7_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:99ec90bf87c9eecd742926bb273e3b0fc215707bd4d66dd1177f9cd98fb064ec_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b4e16472889e8e96c4de231cf5e1e843526e80867beb65141ecc6c3bb906f73c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e76d50af2d06da3be003ddf66d116590a607e8ee6f9cb271e8d8c75875368448_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:08fb83bc2da118d5d3b54fb196327df990e4ebc313f5d2c81cbeeb1bf8df09ba_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3eb4239eddf1afc484a8e0162fe0fd53d978e879990b3c7a248049a9f24e37dc_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:4d2415c846af4f8d29f709da8f86f486a90e7c3ece597ad86013a94683021470_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d44563dea0d8c95753ee767d62ef7512cb62811e46685c18b974155481544d7a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:1d2c1fbd77ff84fbbfa1412f10b9f1727db39d91472d46e912b8aa122c148d86_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:22db9158f28fc82bd4a31130ccc5cb0e44ce4e75d1b97c6fa0573fceb3914ac6_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:90dfe5e823e2104184b5677cb4fb8620ba88bc7a4853604e41c3042a37987b24_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:fc1c5d98b9151189ca3d039fd5d72359553325e4577939e21bf7f444c749ec1e_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:01cfb50aa0f042d810fa8f2a1ee7e251996c0c98d85ef4faac068ea269c3cfa2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0b3cbb24779d592493b85d9c952e89d54b185b617bcb7578c0de244d13c3c589_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:369bcbb812dc061d96e92174330dfca826e3b55b0bea8f2d95c8a82785f10e3c_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:c6269eda3505718cd2e7b36195495ebde6d073571fee99c1bd8bf4839a37e304_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:083429fbbbc0a3d61127326b382a9f26fcbd6f097f8f8abfc041c9ea243b5e27_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:19be1df154a4d4323335f5e757938312e27d74e9ad3284e72be19e8e1ac84d4a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:22ffd6a53c012e7ce87dc8399a58972cc5d9bdc6efb52887a5bd72acec7e38c8_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:e6765da1992528eb19493800a15db50bdc1ba846be7782f9bd3b5dd955d2edeb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:14b6fd45c68ee81296c5fc990ae8c20eed0ce5f3d53b4768399ac8f5861e709a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7a64d0468bbb1740d62747601292eb671028b3358da38711cfe632aebbdce0d2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd9d53ab9e978349c93e35ee105409c5c5b9ccc86074af90fd16b518e34bd01d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f43b4b0df34f3e23ba99a26311a86339e660b6181257a1b3cd8bd87d7d11b90f_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0936e6fd431297ab7642352d746b363e0d0444cb42eb0429b2a56fa76a6c96b6_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:a2af9f11187be7a2b3cf8f44d59de6d1f91812f3896e090fb42c9befb5215406_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:c5d569015561ed1eb725b49dcd08d5c950bcb9809a98723be8471dadeaec6658_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:f69aad6d3616b0e08a3e70a6daa6923367df4d0e494d72c9a1f46d284304775f_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:040b2b1d585944ed7456aa57afb4b1ff2a73aa8aff641edd0f1f6f185165ec89_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6f752b936e0f3d7bf2bf956dbd37273673e8e2dacfffd6045a7d1983ac1f1947_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8c2a81213328e1b8fd4d0fdb1e9a9f99506b36e574a18ce030bb8e2b4ed0da21_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fbb4bb4698e7ac41a1bafcf9de747a67443778fa10007392412ad9937245ef21_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:252263d1baca55497411b084adefc9d9b5c7a30d3a20b90a8c88c0edceeb6ad2_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:4ae3a307dd836eeb9d342e930f456df6669c5ad5a0d0bc48d2d3d717b4a3e6db_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:b3bccbc8f98b686eaae5e49effca3157cb3f0f7c09437da85bd48371c5d84dfc_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ef726fcaaa745bed1dfee3e58c8bb5319983548e56ffb264e3051c2710626060_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:143d8e19c0ed9e196589b0e858d50b18abb5b52630c74fa00ba78793a22d094d_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1ad0ff9a351edd0aa1158e45e4f864f6eb15b1aed3d5a5bd8664654ccc74e9e2_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:46a2727a90869fbb4c30df93d82f748898361ed9fc36aa40adcbee62d3ad52f9_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c29355012a2ab7d5b4a954dc247e47cd3e1af93e5226d9769367dd2638d2288c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2447b976781fcd882fa9cd01d0998513878d81f8866ff5d36e231fd767f03fe8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:2afb8ef901e4458edc977e1d835579a335382a13a7eccc0a4653fc44daf83527_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:552a8261e775f22c9dc935c67eaa9b6791eb69b39b2e4b3b733970e8d4e26055_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:8d9aa4b7542464dfab82bc63cdbeb3927744a011ed43fec5780c802254d113e5_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:612748e45140e3127f82ed33bfa1ec1e6a4fc57b2b1e332a99fd1b9e9427f38a_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:6556be89892a82b88e35de84e95809f437c01811bd0d58e4b42c77485c918635_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:7889f6a7985ba1ece18ce68fa42058c3f0711c91d89ee9fd788135ecc6688dd7_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9be5945597db32d01d32c22114994ce2ce68dd6700235621ea0d51c67bf55659_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:0d6b1d17aee1174445a07c9600d96de254f9a9b7fa3db41bb88a575ac8b4954a_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:6fb580e31cbc3a3e984afa6c38aa9b77aa0c402109bfdef6f4eefff562ddf4a7_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:736072a6f479d41d129732422c8d776180479a635e41b990f9b40283f991faab_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:ca118bade6ea9dd42ca8431a77a15d5810deb98d655e4f78e7c707fbfed7a42d_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:16f950bce8b073312241c071275a000684333e4bb847d31e837466c8b8da9db6_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1dcae526fe5e74575f5c2f08b3a43692ee98c3166c954e4c881f5d3b2a300ed1_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:94f075cae1a94b7842830a02e95c6190be835eb71214411574a2de8291708518_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:96758faa1162cbf6ed666b42a8931f640cfff327c43c4f97bfc069d349816321_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:118ef8aec46d63523133418265b2fb5eab3a11a7af0143554e374b5e27ac08c2_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:199caf9aa30fad3537c9f6f45d86b5fe4f6d292c0cf9dccd0baf08e89c4368a0_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:1e83c5bb741a481e72ff484020e0be481661b2649614f385fa6a61c5fc084234_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:a94f21d42d9374569fbd657e336ca7612cae1e8a62ced702b44e15688966a5b0_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:53a46bdadc53a7c2a053d92e507ac9f3588ac396035ff4d5f0d11c3ba9e64662_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9c90a7c99c1fe56a83d5708813ccdddf8e9175a7a9cc7cc03a14d5c74c0a010c_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c987f50f5f903d26deac4e006eeed37f6c40b4446f0ce68cbda34f2470553dfa_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c9fb2a0814fb439ec65fb9c0f2f8e4745df85284a119f2f3e10853f6d946db07_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:874cc3d93c2d9cf3f56052d27a5d54aa6eec5320c24a0b71fd8bf1204ef3a06b_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:93c4e01654e48b67ed0f92193ea6827475a7ab4036f89762dd3c2b492baaf3cf_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:9d12893e4a12babe7e4556815fcef1d5526fcc877934e25a86bca08ec1817e58_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:b04070e40db79b4cd695f5b19e019f6efd405348c143e03d5eec2a6739b86cc8_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:30f43ce30b6bbec85fee6f64caafef4d6d69729ae070ab1cbf259b0fb47d913b_ppc64le —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e9e9f483ed8f24d757dc70ec6dde764e7846e05854dd1a80caa23241f8fa98f_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:81d80f75a0179e5179bb3346c1a95b5b7e9df602eeb93f7657c436268f49893a_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857b8458c6c5b59ca81f1ab84d3a0a6f129bec98ef5917129831338b18d505bb_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:94c1b8990f853daf764bf91f1c80d7c6c2025c06c604c9748729a258513706b2_arm64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:aa86c619d61c0627d6f447b11acf5b5cf25d6503a492716fba1151cf20cb11ea_s390x —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:bb66143b5ae95e73a62e244502bf584e2ee6f008ccdfe5799cba663220a03828_amd64 —
Workaround
Unresolved product id: multicluster engine for Kubernetes 2.8:registry.redhat.io/multicluster-engine/work-rhel9@sha256:fcaff3c473e5d7112d41d9a618d104f646c64ed676ef709df3d75c63edc13224_ppc64le —
Workaround
Threats
Impact Important

A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.

CWE-825 - Expired Pointer Dereference
Affected products
Fixed 4 products, the same list as for CVE-2026-44990
Known not affected 104 products, the same list as for CVE-2026-44990
Threats
Impact Important

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 4 products, the same list as for CVE-2026-44990
Known not affected 104 products, the same list as for CVE-2026-44990
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:47735 self
https://access.redhat.com/security/cve/CVE-2026-16242 external
https://access.redhat.com/security/cve/CVE-2026-17107 external
https://access.redhat.com/security/cve/CVE-2026-25681 external
https://access.redhat.com/security/cve/CVE-2026-27136 external
https://access.redhat.com/security/cve/CVE-2026-27145 external
https://access.redhat.com/security/cve/CVE-2026-29181 external
https://access.redhat.com/security/cve/CVE-2026-33811 external
https://access.redhat.com/security/cve/CVE-2026-39821 external
https://access.redhat.com/security/cve/CVE-2026-39828 external
https://access.redhat.com/security/cve/CVE-2026-39829 external
https://access.redhat.com/security/cve/CVE-2026-39830 external
https://access.redhat.com/security/cve/CVE-2026-39835 external
https://access.redhat.com/security/cve/CVE-2026-42508 external
https://access.redhat.com/security/cve/CVE-2026-44740 external
https://access.redhat.com/security/cve/CVE-2026-44990 external
https://access.redhat.com/security/cve/CVE-2026-45447 external
https://access.redhat.com/security/cve/CVE-2026-59869 external
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-16242 self
https://bugzilla.redhat.com/show_bug.cgi?id=2502690 external
https://www.cve.org/CVERecord?id=CVE-2026-16242 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16242 external
https://github.com/openshift/hypershift/pull/9031 external
https://access.redhat.com/security/cve/CVE-2026-17107 self
https://bugzilla.redhat.com/show_bug.cgi?id=2506771 external
https://www.cve.org/CVERecord?id=CVE-2026-17107 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17107 external
https://access.redhat.com/security/cve/CVE-2026-25681 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://www.cve.org/CVERecord?id=CVE-2026-25681 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 external
https://go.dev/cl/781703 external
https://go.dev/issue/79574 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5029 external
https://access.redhat.com/security/cve/CVE-2026-27136 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757 external
https://www.cve.org/CVERecord?id=CVE-2026-27136 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 external
https://go.dev/cl/781685 external
https://go.dev/issue/79575 external
https://pkg.go.dev/vuln/GO-2026-5030 external
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-29181 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456252 external
https://www.cve.org/CVERecord?id=CVE-2026-29181 external
https://nvd.nist.gov/vuln/detail/CVE-2026-29181 external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-33811 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467822 external
https://www.cve.org/CVERecord?id=CVE-2026-33811 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33811 external
https://go.dev/cl/767860 external
https://go.dev/issue/78803 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4981 external
https://access.redhat.com/security/cve/CVE-2026-39821 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756 external
https://www.cve.org/CVERecord?id=CVE-2026-39821 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821 external
https://go.dev/cl/767220 external
https://go.dev/issue/78760 external
https://pkg.go.dev/vuln/GO-2026-5026 external
https://access.redhat.com/security/cve/CVE-2026-39828 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480687 external
https://www.cve.org/CVERecord?id=CVE-2026-39828 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39828 external
https://go.dev/cl/781621 external
https://go.dev/issue/79562 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5014 external
https://access.redhat.com/security/cve/CVE-2026-39829 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480681 external
https://www.cve.org/CVERecord?id=CVE-2026-39829 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39829 external
https://go.dev/cl/781641 external
https://go.dev/cl/781661 external
https://go.dev/issue/79565 external
https://pkg.go.dev/vuln/GO-2026-5018 external
https://access.redhat.com/security/cve/CVE-2026-39830 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480684 external
https://www.cve.org/CVERecord?id=CVE-2026-39830 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39830 external
https://go.dev/cl/781640 external
https://go.dev/cl/781664 external
https://go.dev/issue/79564 external
https://pkg.go.dev/vuln/GO-2026-5017 external
https://access.redhat.com/security/cve/CVE-2026-39835 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680 external
https://www.cve.org/CVERecord?id=CVE-2026-39835 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835 external
https://go.dev/cl/781660 external
https://go.dev/issue/79563 external
https://pkg.go.dev/vuln/GO-2026-5015 external
https://access.redhat.com/security/cve/CVE-2026-42508 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480688 external
https://www.cve.org/CVERecord?id=CVE-2026-42508 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42508 external
https://go.dev/cl/781220 external
https://go.dev/issue/79568 external
https://pkg.go.dev/vuln/GO-2026-5021 external
https://access.redhat.com/security/cve/CVE-2026-44740 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://www.cve.org/CVERecord?id=CVE-2026-44740 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740 external
https://github.com/go-git/go-billy/releases/tag/v5.9.0 external
https://github.com/go-git/go-billy/releases/tag/v… external
https://github.com/go-git/go-billy/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-44990 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488565 external
https://www.cve.org/CVERecord?id=CVE-2026-44990 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44990 external
https://github.com/apostrophecms/apostrophe/secur… external
https://access.redhat.com/security/cve/CVE-2026-45447 self
https://bugzilla.redhat.com/show_bug.cgi?id=2481898 external
https://www.cve.org/CVERecord?id=CVE-2026-45447 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45447 external
https://access.redhat.com/security/cve/CVE-2026-59869 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122 external
https://www.cve.org/CVERecord?id=CVE-2026-59869 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869 external
https://github.com/nodeca/js-yaml/commit/24f13e79… external
https://github.com/nodeca/js-yaml/commit/59423c6f… external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0 external
https://github.com/nodeca/js-yaml/security/adviso… external

Loading 1.6 MB of JSON…



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…