RHSA-2025:0384 - Security Advisory

Topic

Submariner 0.18.4 packages that fix various bugs and security issues that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.11.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE links in the References section.

Description

Submariner enables direct networking between pods and services on different Kubernetes clusters that are either on-premises or in the cloud.

For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.

This advisory contains security fixes, bug fixes, and enhancements to the Submariner container images.

Security fix(es):
golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html (CVE-2024-45338)

Solution

To learn more about Submariner, see https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/networking/networking#submariner

Affected Products

• Red Hat Advanced Cluster Management for Kubernetes 2 for RHEL 9 x86_64

Fixes

• BZ - 2333122 - CVE-2024-45338 golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html

CVEs

• CVE-2024-45338

References

• https://access.redhat.com/security/updates/classification/#important