- Issued:
- 2025-12-03
- Updated:
- 2025-12-03
RHSA-2025:22683 - Security Advisory
Synopsis
Moderate: multicluster engine for Kubernetes v2.7.7 security update
Type/Severity
Security Advisory: Moderate
Topic
The multicluster engine for Kubernetes 2.7 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes v2.7 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Fixes
(none)amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:d64f8dd4bc9c3c9cd4cde0d9c824a5554d3e3bad10cc45259f0cae1b49d60d72 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:8b8c1251816c0acf10a621f145a3ef8be31175128c88afc54cec772dfdb3662e |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6ce6ad329546167b7e5541cb196df837a5c0012c0d9a153acd2237f91a43d2a7 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:29b02c2440139782938353206584bf71cc8e99b1f8536592d83e25f91731946b |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:a41375e857a8766ab2d82e296900fed5cdb4540c32e7386f100c5b3e1009fd99 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:8ae392d24c0b33e18573f5ca71c092248d31b4814f81c534f99629a207d9e31f |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:39d0950969b8d78b1088632f5c170bc52f76b529adb76cbfd09f6c44eb8ae91e |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:263985d221ed49eaaca8f790b347c1bcab78fdff509f0e00fbf45599f720c32d |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:8dc7f879d66b656977f2eaa20691835f71404512932bf4243024757a4214e43a |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:fd1e943352542980315f478502ddbb2ff6ab40bd7da740b04794ac5cc76249b0 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:3aca4b3b0ee0e2a80cb9f30c64d6f098ba44aa47b599d403a5a2e6215c23e4a2 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:87ba9878d38fd76f1ab71d970f13c65efe9564d7c2894be6dbc3307ff8507bbe |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:0488dca3cb2db097732fe153483af7c4b2acdb7b0bc241f30e78cdb0474d11bb |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:a6332148fc73894438d9736d6fbb3a05949430e6b1535c20af530bd88d3c2a47 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:f4c1198a9016c88cf478b62e8c1f46c5b4d79a800f4ee51f53ac2c4d837c4391 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:335c06e3b6d2d218886d25c69e825a26b402cdc09a9d85699b95295a24d124b1 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:349317d9581f67cea6ea4dab9b812ca81f83ef2ae14293b8bbcef40e4c7a7b75 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:f0ea538a4630ed34fa6adefbff1bf3252df5253f33a07430159a4f76f0908b09 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:935d9a8e0ed855a410cfee4e0eacac37edc9111587fc329f9237ff16c1038f4a |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:394431fb59a6869322cf0928ef267ac2f7ac5f2ea23c5baae56970f25c3de4ea |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a14672d5ff7795881a8c4910c2d9453d0f4b4339cbf3ae3fd511d9394c74aa85 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a6b57b0f6f8ea821f757dfc8d0726268bcc6a453700610490a882badd17f0d3d |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:c5e7e0f82b73bcdfc594b25ecb2273819fd28dfbbecb4045f997da3d18a398dd |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:27e6e70a1b3ccf808e4fd33870ec138c7c326b4fdcde2086947ea993a5a64012 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:295cce4181249098c7903b70ef34afe257731e062c9cb944845663929ca8075c |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:1a2ef170407505193e8d1ab4832ae0b945ec2fd9245c5a93134ce73f959ea34c |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:7ef2d434ff3b461181f4fbead426143e21524bf70e42efb2e5f945f1a4b64b51 |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4122c38381cc2bc9fe06efee1b3d2d8ea908a5cfcaf74686734f9933c1f033ce |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:c81ac5164828627fa5c2f1341d47923bd423fd264b892947eb76547f7a806d60 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:7df678c748d401575521ad69982bbb194e951f77af958e1ea168a603eb0672fb |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:9917cda15f25447457552022bef52012a53d66e5f3d837ddec58a47dbadd1341 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:1138ac7b417ea51bcfe37732c4cc91515d5eaba1c534ceed6dc1eda216136bb3 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:832f42e8ca9c824498089a09520228ff246c1591c3852f887e531ebd2a93c269 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:792fd2f5f20714b75f8bec25b6f678ad8d3aff06a70480204cb71ae9f38546ee |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:998a81a18a3ca73421c633171ca4950c857af557e464f8b55ef05a7721cb031c |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:833c9d369368a66ec44bd877a9764a2d8dafd34328da819573277efa8e49a006 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f3f985422a8119f9abadf4e2c11d8da0c8affc2488c290dcc9884dc0fd0c07f7 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:4364624686c53f5996960296f8ce496ee819d500eab396f35f7bf417dfdf08b9 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:9d3d5f12be31aa55bee7da2c52de824a236bdc7df0a93301db5fcdc83f779172 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f33b87fa6e230bcea8a1ee1a8818aafb3ffb929fe728a62ee6d4a32a4bd45176 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:f31823bd12c9daa745e133aa206de6ce4742b484aaee151894ab5257b4454ef9 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:a15555daec52aff10f5a0f62df90c195ba992e49878e455c79af433080e47804 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:dbfbe8807d3fe713837933f38f24c46317f939695ef4cadb130ef72917285661 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a68f699095be2531a7cf9cb69c88cff5802bacb277b4e9de25056d840a013d0f |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:07753f8fc9b6723dc21a4de61fedafbf0c939cb2764af94a5708ff286aaf1dc9 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:9a283e0ce104cc378a3d6fceb89be776c8e8c168a7c6a4aed0f89dc9ff99abc3 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:b9c281251add4ea00f7e759da64813f0c8c5cee1d0c1f574c515b53d6afb5f8e |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:c82fe71551720c0af6d8d209842aaea41eb6fba1a5651ea13dc4c6fcfddc66a3 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:429bf05d96419f50afc13783dbb48c6d35caee9a5f97647bb1fcbab2d9ef7685 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:4e0d8a47e840f27038d6290dab730d7115dc1b1a5fe2c2fe7c2307211253a96a |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:df45bcafd8b0abe5c86812191b8474d72175a2ac3fbbcbc3c4006b8bdb6bd158 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:53532c4f8a3328788f7ad9ce1de7e94fe3c590dcdf367e04a4e47c190a0d39c7 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:7ccd6c3cf13980e73689da2a969cb29c1875e3bd4a76999a76f588f9f0cde8dd |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:0755c4e05987fce669d4fb7d021b9202efe9b5da35fc4776441a6a963a4e7f05 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:1c49bf643ea000a0f92a1d93114a4a866ff51f47947c6a7102fb8e200ae57e8a |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:f540ce24ffa5cbd55710870c5935ccdaec5ca3db13d2822f8c12203eb17109e8 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:c58d1015f276eb00d204e4e76c31862e83896697d145f2b02ade216a47fb13f5 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a58058bc3f0fb97590bd4519c82394511c00a59bed2205faf7d4dafdcf495102 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:715e58b0900c72ddd2e12e0ef2119c0fe45f36192e9e13debf3d34880abc5216 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:1d8cbc41e44f8b099bac2403c7a45b8f4ecc08eb8c28d2a18d8d2d74f64df9fd |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:799050e70c61dcdaf18919b968c5cedf4efa32fe8dbd11cb70fefbe1c500e389 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:c200e777e61c1c020519a4c1d4349e7dd48b9487dd16b2c01702101bfee1b9cb |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:399a470cd568c52ce90801aedaafdcbbc7541fd091dba253475f1e071859bc8b |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d9047af490d309ee7eb3f3cf5dffdf8b8fb85c1d51fe001630e00af556b0d6cd |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:072da24a7a4f1b61822ae7c86f8cc0b07462591168ad8a8dd89a02cf3bb33fa5 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:92060855b254c8f84a6af49cc6889e47c1fb64a775d741efb5b81b284ec1e34a |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6bc690f8da30efaae06ffa36524c17ce5a0e513876184e9b7c8e066ff5756640 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6c10e026acfc7a7f9a1359086cfb0fc58a37850ce00d53fb5fa6a36b00b3b415 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:2c93d5b59e2e3057575b308404fb6b6950ada596494b7cc790afd298ac4fda09 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e61a3f2585a91fba4f0fcb7fec545a2cbe33365476aa0df45d98aa640782a38e |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:3999b74f14a67f5939824a2ad785627635c64870f46b57eb42c643fc678c35b5 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:bab320462a18bc6d9e980336a1e5c08717bd4d104c4ea7ca63f0eb0ccbaf979e |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:35c4ed6b4c610f22a08a5376ddd7ce6896f4f1dda189e0f4979023cf2f17ccaf |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:6e0f8617a8f408437f1dc7ea0405242fe07ce05e80b33c77980db613f490a8b6 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:82750019c353c3185dc35fb68a675c9d758a3022144855ac09bad49fa4ac3daa |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:331e85f94653ffffee3b00ce43873be9dc46b024d9924505ce86e87c29aaf717 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ff0c848b18b366afbe60b4fe97c876c0f71999262c9b92eae89db03b1158496f |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:1c0578edd80cc9e3d2418ce0514996c80187f21ee1fb8f3012a7f18331e6d5e5 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:46a940727ab0bb654158deab9b9fa85a768b2fd6bdcf32f9eb0c0b061317be72 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:f6f42a735efb43df610a27239c0ef952e50666dbb8934be136d9f164f92c2207 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:33ba95658e6628be853182a24007d0eef69c350f344e01d24296396eaba1e0e9 |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:dd99548b21e36ba637fbf8e44f6062d2fec98abd536dba16e10475648664984e |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:b6a400ca8aaba1e92b486a1ea99d3a7c6d219f3f0897d207718a0a9e3b74e30a |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:547db048159c84228eee682df6c0fa6e45660d0ec27f6288e67c21640d5b0606 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:946f78e153fe85ec4066297fdb64cedc7e67ca4e68b685f25b28d3042991ca4a |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2ed8c05413a5bcece9c400b456dbe65c815c834d7cd9ebcbfe22be6477e243c4 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:25998e11ea2f8ad8635613187377f2bcdf14c06dbbb8324d37ea802ab53ab4ea |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:428cf53e9df3832d4b5b22b936e61372cdee0f0af8652432dd0e205f76762bed |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8989808fd9a73ca0a5ff97b420a8ede8b56efac5fe203deae5972412a51fe499 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6693b2725d9e2ca45f18b222126e01765af4b753982bf0fb22ec9fe1660159e7 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:8b4a6ff329e9002d62d524f74770610c95fbfa5d5e619db4702822a6668ff497 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:4c60d0415004cc994bc68aae4e38bfa17bb0b67df3213a670dcd1ab7dbfd55af |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:caab26257c6df7d6ea0f91a5b0ee637be62f421dfabb3185085e62e9de947113 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:b8e9e8ba56e74a8ca955d5e552ee7177c7468f7d32f0b0cecd5ec712641db09e |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:12c521c05b81d884ad35a0c99cf00eb648beae341cd983c0c3cf81ebb469a106 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:0248ad259c16300ff2dbf5c4e0455a06ca903dfc10c95fbe4bd5484bcdf39824 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:4f473bd04c4ad0bfccfee9298541e9368f1c83e38187513dd5b483d0a5afe95f |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:35ae195c4a68b46f677addf0f19d78a3d9d984dac13c7957d56e9825807b58ae |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:82b8300029d146e1ffa6df80e208d1d461204d2de0e6a51e151d110a6b7edd8a |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:e7ec52eb83bb5c0789052afc64c908c67411ae671ff45860e703b204c817c427 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:da3d7fbffa19cd6017befa8eaa85b493ebd849a27be9dc36d589426492de0adc |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:96d1b5fa26dde708b2530542d4a49a5cc5854d08e43d13b323f2a251c7006303 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:23610f339d7f2e87a670fa40cdfe5402e51bea44ab8000f930f84314cbe9ab21 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:be638cfd0897aa7c66b1c56b8dee8ba9a30c3497dbfbf1e7855cecf4a00c73b0 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ce57101e2592d0cefd509f4948fabcf5f059774ca58ed32410905ca4b2af0588 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:8e766e6892e3f3e4b97b2af195c359e5c388d5d5cd23bf82b571d0f8c40c674a |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:abaf77e6b461da4ae52774dfc2816c619c0bb9a2199024742ec173f3401c9981 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:17ff83445d5f6c2296f1b5c5061734a7866c84f6951e140f194bb5a1b2c981a2 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
