RHBA-2024:2104 - Bug Fix Advisory

Topic

Submariner 0.17.1 packages that provide fixes and enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.10.

Description

Submariner enables direct networking between pods and services on different Kubernetes clusters that are either on-premises or in the cloud.

For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.

Jira issues addressed:

• ACM-11187: Build Submariner 0.17.1
• ACM-10508: [0.17.1] [RDR] Submariner connectivity issue hinders cleanup and data sync for CephFS workload

Solution

See Submariner multicluster networking and service discovery for more details:

https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.10/html/networking/networking#submariner

Affected Products

• Red Hat Advanced Cluster Management for Kubernetes 2 for RHEL 9 x86_64

Fixes

• BZ - 2264183 - CVE-2024-1488 unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
• ACM-11187 - Build Submariner 0.17.1
• ACM-10508 - [0.17.1] [RDR] Submariner connectivity issue hinders cleanup and data sync for CephFS workload

CVEs

• CVE-2023-4408
• CVE-2023-5517
• CVE-2023-5679
• CVE-2023-6516
• CVE-2023-50387
• CVE-2023-50868
• CVE-2024-28834
• CVE-2024-28835

References

• https://access.redhat.com/errata/RHBA-2024:1788