- Issued:
- 2025-10-30
- Updated:
- 2025-10-30
RHSA-2025:19332 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes 2.9.1 security update
Type/Severity
Security Advisory: Important
Topic
The multicluster engine for Kubernetes 2.9 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes v2.9 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Fixes
amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:92dcf853dee08f8f68d43d6928df81e0e03cb95ed1c7b9035de089ec831ac12f |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:efdd51a7d88d93a7f2c5a41760d8dfce2a5d14bab8c4cc0fd59ae4dd7619ff45 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:70dd087d62ac3a981713c7d8f2b167735838a3b86f595d18909bc9044858dfbd |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:faa320e4acc8adf7adf2657e6d721821aa262a1612189b40d610730123fb0734 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:9e2ed4e6a162e10bfe294b60ab8a346be216cabc32036ce3c5d147c37bc12b7f |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:7b741d02d088c58663b46a9428e08b1d611cef14db47101c2c6026fd3910d0a1 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:7f2ad02ec5d6d9eae0f4e9f17a7c018bcd3941b9ff74beb854988a4066162e7f |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5e43ebde90a89e834482f60c2aa2e42d2e278b020176c2ba7a1d4d04e752537f |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4106d49920040a113fd55df9f7c73ab3482e7173badcb28e1f276e302f61b6cf |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:4740c45e803d9cef8e1828a675053150bdec5c9e3239a249f4222507487f88a1 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:33e509384ac2dd3c4b8c19b4a074f63ae695848d2dd622c455199a0f3cc65dd2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:57e77a1c925df18b57825faddb711fc9a0cbe47eb5ea57dd6e276e930471851d |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dc0d87fefad9caddaf3c2b22c8611df9acccd7ec156ced58edcc170f609bddf9 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:487d5f2fae53dde288db6981d2e6373d0be4ac440abc7683147d64fce28976de |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:04ab6450876affdee62ac29f7d8897391ea649533b2fe4c9a45f51f02a686b00 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6ea6ea4f6425b574d708dabec4dc9f42e39b9553d4969b91663e2ffd866d8bb7 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:04e05e26477f39ec59ea54f4881b9e6c9f0584fab0ca8a3a63757b15b6a85605 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:4a6fdc895b501d75c7d7b45b16f69703cee51f3b772b71927224408b2f8d56b1 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:26f246465a11f736dd02754867c7c77e1c09064b316dba1b58bb45cfa911a3aa |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:eff1eaa219f91ca0d88e2f94204f4170f6e36d8b1107aef076c690d233af06e1 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2a0eae2367f79a0bd30ea59510a5c68b6bdc7ab892758d1adf9d5e82ab997255 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:af5ad97203aa78ff674ae667c606855528d609a0fc23dac0b40b6abc33353263 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:cbd55380ca368ee1cd14542b1be5cc35b201ad9f6e4282d76421783e46526c5f |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:869e84f8f70932a52daa3e2ab00edf51d307c5e765e96f4f60959f9f048299ff |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:45c09715d0bce01d62c99d186d247fc79b26a746ff8d5b7dd464f6614832fe7b |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c1537bc0126b2cabce127ec3d719b9ea6341302cde316cf37f5348ae1e287124 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:9720723383893900fbff504e64f6e13c8f85e23442c710b16aa05bd7aaea50d4 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8bd6b32078b7aceea003fdcd90f51a963e056a16dbe5ea54d56cbdfc6de029d5 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:4280a31c94268bb421798385104196fcbf69d6821344601af246fd087e93ca63 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:b815590412ff4a47e299f5d30703bc292ba70744d58f4a90eabcf4089e50e2d5 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:08038f377c65aefa81d3c7ecae4994d28d052bd4bad585e18e8a1a68ab17cae7 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:cefd936f01d767634dc22fd3cc17aab898d050ac1b9ebe91c34ff040ab344c95 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:29d754ba8de0b2457c57a385950af19af601852f1c0111d3b43aaebf8aca7ca7 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:02265d831dca8b81eefa6e184b146bb41dbd5991e090a5fa652af5d380b5f00a |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:fe1c6d40db0bf10dc900e65c862e830ef3f3e23cbc846fb77283600213bf8698 |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:b0b6bf1b6a62b9341fa7c5854b1541230c815bb1dc6d28889a43647d9fda5f73 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:1ce44652fdb1ff8873bf78c98a694162d5aa4596e4e7cc825ffa64f6ca3330aa |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:0dc47fe4e5c0ff1757a40758270ff3f143789cd8d69276cf43585662814f4caa |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:a43feafe0d55422140175c005e7496a3b3ac24ae3ccead7a3169f5314c025c5a |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:99acbb35f64967dc087f866416c93c62b33a93f957bf1fe36468b1e894f3732b |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:be2bca8914f010e5258d84f8f7b956877acfbfcc45f81f856a837e5585ffc2b1 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:f6aa77b98c5362f7787f64e65b1d04eae94fc20ea326c0c235a165a422d6f04a |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:03e042ffcf052edd9f906f91571f102ae880a9ef11327a542859b64ccb196408 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c124e98be5de4a56ea655e4beca79f2858b32465fd20e07773e7a1395ab698bf |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e02b6c0c886afa602daedaaa42b67d76292a91036f445ba58f23f89ec6eacd69 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:3d3c96fd84e118f8236161bf16f22e2456a84fb38b0cd80406e97ada5149d30f |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ef34aa426b318701b9b5d4e02b50cfb6bf1d58558a59c81842ab55bade9278ae |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:d13f452122e76244f0af761ff44870414bf84f596a1bcdf0306b796e7eb2d2f5 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:2dd4b370e8615eea2232d21044a2179ab35afdc6d9310a5829230d4c3586efe8 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:4bf72617fa311039cda7d10ea58387065786ee78b6b1d9187de39e4e3c648171 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:51f03902649faab6a338629f0d6e8f6f596f20c0f8d593321b4d3d51ab1cb1f5 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:8e6f6ef97f7de1daa81b38ffa3bd8de9aa2f2da3b46c50cf55e6b69731e86517 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:43bcfbc51270854984894d40717d99ff3dd5da535e2dfdc9961d27802dbf6ccc |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:88c20a3db23ec8edb463c9aba6340522118967db2a220b95d86a7fcc8c6462cb |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c8830e47c684454af4dac775c3cdab4d8efcda9f9bdbe5c3f70ded53bb92cf40 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:2e11b27b9d6884dcb846865d632c141a038f85163b0c4db63a1f29cb8d277125 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ee7d6d3fcb3a025c0fca2edb3b8da9c1ff788665760bb5649a723fa025522fe8 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:857bfb293633ec85b774c07b2413f1e184155e5b7a5f63a99073ea419a671e17 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:2d8992c950833e7aacad7cf7ec1cded29c2092f7509bf50dfbfcce06a4bd149a |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:ae7818eab65947f74badec716268053224a27b53d704d89c455380d54009c10c |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:746daa9bb14b25657d06f1f812597c9af23bfc3609f5886073350b1ceb76a0a1 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88b5dc5a9a4881dcf9a1beb07e99229f3b82a25ad6f0ff180f634357461f55e0 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1d2eadbef6e687ee4115dbbd7884baaf76d274c533be945da657476140855949 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:4e94f783fa697c840fd30e14899449cbea182f2617bd458648af9a042ea0f895 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c13921ef299ee6776ef16b6ee3bfd200436e87adda99a1f8800bb28b945fc2ed |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:95d42bc39fb3225766e10a6bbab57f81708982b8c604b0e9939cc556fd3b0045 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:01e98f40cb389678f6761ba06bf64bea59af4dfe2c0262389f4dee138f24bc99 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:fb3bab06e277d0bc1a606c9ed25c8f12a773ea9790c6ca77d7a75a04e6319dc7 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:a98d413d8d4e6216dffd3e1205c5fdf56ef1a4ce8d807d3202e176f5528c49c1 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:37bd0bf101ade05eeecc27ea3459fa0c94780c7ee27b1058de3672da75236c26 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5b791cf9d6567b40d3ad54e6f53a68d3b106d12261da390afdec452778489d35 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:e6b5e5186e0246aa14f517de4a59c98efa975e75a63a8e2ed6fab83ecafcfd6a |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:58e1bbded4eb4acac31e7fd92ec63bee206edb9de0fa3835e8fd930a1043c874 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:e268332aeeeebd1d10688d513fa422c1ddf6d2e448f558ddae25ac719dc4f608 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:d058ba6c2f6e3724f3c721c66f36971289699e87caefd2381e18cdccd08e4f0e |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:16f8baa1271b313bb4bbfb4321a1d1ffe2c4b377a237f317640a8129d324b418 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:98101a29fb03b044f841c73e251d516e5340570ca793ac5bd02473de6540250d |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:17a05115418ef15764141a6b49322198a6a95f0c8088e7f999ff321d29bc65fc |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:3147e3dba040499e652cde9d50f7db0b687df65e098ccc3a462bb00e08156f7a |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b740cf2b18c963ae78804851f15a8ab375431143d7450626cf48de7b168078a2 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:67d9035a03c97783132281761e3857bb209fdfb6a24e7f21f266d2087c7b99f6 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:1548a662b36f1973ffe4db3de267c6a07a9b8d02398210c0912f1371ff2c9f5f |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:707ec0e9bd9e050c6394a40a8ededae0165b55e4a49afdacfa9f184484c026ac |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c09f09d492589e985ade4c480b5bcefa5ee8d5fd819c6a4953d581f60b609738 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:96f6b28ff795312c54eedcb8c474d237d4e55081ff9ac1fc276e1a60b1606405 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:3a315a6e64edc354b066358fb29a64e9c7661d1ee9e634c084cb972d87329dc9 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:7f64789346a9041fb31ff2aecc0dc48c6bd85d36999a85190e5defa047a24c0e |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:840fbf02ac4883ef94a41476eb3ab46ffd105726ccd4b02b9b48b6606dcfd8f8 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5ad05f728a9409bccca7af882d0bb7161a2269d8336ad3e63c3236c9023e017a |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:f2b3e838d78b6bd89e5c9f401326d08696fb29b862fa99b701a3b0aa8b705fe4 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4f7a00583f8fe10b6fb076c75123c3fa49d9cfa0c89081d3bb39ed347f4c0993 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:63aba7ee17bd42208cf56feb3eacaebf927b1d1ad6c02027f2fd6e301384f13f |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:cae72f2c47613aeed4b9238d9a1c3687de3a29f67cbf14b9afcb6276a5db708b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a8d85592cec9c42ad4553729dcae98e37be2e73bae8a1f90797b0e2bdea08830 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:0c31f43690a17f234ab23cae5a05d47404289cbc09e9edb0599e8a481b97465a |
| registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:ad82e2274718aa39f58089d329724f84ad5b67ceeb195600e564d2eb57acca49 |
| registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:74af8ff6e238b335b5d43ce50a88b38eb5c6749d141abcda54bf6b596dbe4b87 |
| registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:a3fba757d5af0c46b5c51de9148c8c612372634025aae52e303d8f95b64a01b5 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:a61bb05b6d74172b966a7af990ef6c2e6308b0d7bc8e15d18f28c4aadebf74a9 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:67aafccd8dda051de2490e3db11a1f600b4b8f32a2fb83afcf8efbfa0f582709 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:e6e6247c87feb3f6e5d0d4655a2318de155935c50f4e053f6a1f5733843aa97a |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:3af994fe559a9f75ef2a9765214a5de4ab98af4e2909d05d62dc995f6e94e7ac |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:b69b298f473e59d3aee94cdd0abf73973798458eb138d568ad07df4ebad4759d |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f4ca2e5bc681d665e6234a1713ac02ea7460ed8fc5204c363a93eb758521189a |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:f77574607b8ad0a42d5527f58243e4987a99bbee91f1bcd4f458720619f84b99 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:5f920fdd7a8222e575e3be8108f35053199041f51ea5aef10afdf16270d2c2e5 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6609c43c7b9b9c365039d5d1118886193484ae465cc77e78b8c4502d9c4305b1 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:93dd8cb05e0be37173fcb5a73a71f9b4eb55106e9737fab480678b40490fa29e |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:aa6c4da6769d656a7229b31785bab3a471f9b254eedf8c91f834a67085d3346d |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8909f28d0ed965518fb02f018de3d4a1fa2b0f5bdfc21b69d42d51576e80a027 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:c6fb70f93adef74832ad4413c89af34fdfc68ebc47bd89e8371dcb8200c597f5 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:f26a12f7012e513d88f26f64d2cbbd6d3029b77d67a1804503dd1e59f76e8089 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a09497ded7ae89ac899ec362cedbfecea89a5abf568acd7aaba671edb98226db |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:495c95d1a2df101e0bf9c0eaa3caeb575f596d6098782c3a0a1dcb0342589886 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:70fde193066fa89b04ac99c85accc75ad03bc3cedacd31769582e73468f1f0ae |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:b488d0482849357ec15b94803eba470bd3c96a3aa70eb401e5e010d939996fd5 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0c7d2f1d2dfe831a4c2944677a14cfa5b507f3ac445dc4979e36a8e5d366adfd |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:e9a01f91576307ab1e618ce7e4db1c116b2eb9701c5f5a48b0ad671fa57dc18d |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:36c26ae9529d584fbd4ed24376ff8a83fd583190d4b13461a484e8f49c3ac3b3 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:ddd7acae1c7918ec983e18cb6000a6050fd80eb5e57d2f3b9754de3713ba877b |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
