- Issued:
- 2025-12-17
- Updated:
- 2025-12-17
RHSA-2025:23528 - Security Advisory
Synopsis
Important: multicluster engine for Kubernetes 2.6 security update
Type/Severity
Security Advisory: Important
Topic
The multicluster engine for Kubernetes 2.6 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Description
The multicluster engine for Kubernetes v2.6 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Solution
For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:
Fixes
(none)amd64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:6575a549657eb7a0c51235fa9ce1ce4b601cd532e5a5e6e6a5a9513eda3215a3 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:5f8c473c3628b606bb01b0a9d158eb3cc363b55685fdc40335d809ce33abcee6 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:56b2688587848e11ba6ef689f457bcc047a54da19a8323c135d1caa3df609a41 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:d16cf9a7842db1d54beacd8a5494f0d708728fd4a587dfc594f5f9008ae1b7ed |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:2cc6f284e9f283da1a416bc2851e6e2ff89649d1357f6f3c728382de67dd6e82 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:4ef5651b8c718bb5bc4ba299dfe22866a3d1d0504bdfaf9a54b6db2a750e0eaf |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:16534b62e3f343cb50c2614e1f75cb76d3d5456bac9efcbac7745b8c04683cd1 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:5f29999db5b07f727d3c4556dc5702808f4682e11796682eec47cef06af3da4d |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:35139f01f0234131d8f2057ccd46697352c9c1e02a8e7ec70e30a367e06944ae |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:3b7a3dd7549989bec030617427ae4f5f25641e709f645adbcb20b3143349dbd5 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f9a38a9960a716f58f5ba7b07df9c6d2fa4527d5fffe0eba5dc190b4762019d1 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c2012eb8a6e4fb0844cb8699d6f4944d2830b17cc74a07a4333bdab112861ec4 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:6ff440b0fb6b959b2279db0513abfc88e464dd093fbc79c027da98eabe74d9c0 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:ac77618988e6851c66218f9a40d02a5c786d7a06715fe1ff10e28a0d76abbdee |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:18426b42530f54e3ced059bdb6c0d2526e6bd265953603684e04c0a798af4a64 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:76cbe8c79a30c24f36ffaaa03561a0e40a2f6c93881d119f82f6f344c0ee61cf |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:aab30899401588f37526745291e8ae979414ce5b2d2221dfe996463975719e59 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:8eb36f14659aa052193e2391ae85c8f2effe8be2b507bf1c0ca8f43b3fd1101d |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:c8ff61a7f7c29c411082a5150a04d62f0e07e11728135be95980104aca717075 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a52485e2ecf40b5ea8a71a1e0bdc67598e073fd4784dc3da350d2df11cf735cd |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b2202f7cbbe9928ded3c9a05d9e683348b47cbd5c9d553ac60dbb05920ef9ee1 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:1190fb7cfb27d8d6cf7b1deda402a07ceb2e6406d6157dab93b5c3bbde48aaa5 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ed8ecc6e7ea36da286bf98ce4eb6a8abba1eed4e1f48cee2bbac8dbe08cb31e2 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:393f5d5637d08932212f250a4f388ebeb0bf3f0a8cc300a18f097394fe4861e2 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:69533bf9db1b3c322257d5c6c3f058c87888b70993b08cb90c81c1b9df7c4073 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:bf57dd52e5a0e6952921e3823fc7f71096c22965d466477ca57402899d1f4af5 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:f7a99f270874b02b1c51c212be708d32fb25ff2f91a64760d1c7eb2c925329ee |
arm64
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:27834804d5c56e017785cf9a8100ebb1989288241d8c1a08e296778d2bcf52f1 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:7f7b8465e77058c79c61f6b077b2cb4850b93f074bec86d3432fc7187876d39d |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:ef46d89f31a9861d753af67acb704d542f1bc25f31cccf6a4b6cd843522a593c |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:4dff069722b5fc2940c5c42f48f5aa1172afdc7c8e19f35f639e757c2c878d11 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c73e4d70ec9d0b9a7c14ba8ba9f151abf8998afe8ef60cc4d3658001f277080c |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:15cc2942b22ef3d55920bea831403728cd63f7d26304323612c8d4ff2d85c236 |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:f8e8a5388c2c6ba1ebb2f42a0964d6734655565940527107a314eeedca39a23f |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:d0fab77c60c8b0915844238a45af8467fd70ca3b61a5d7d1f6239dc2dc7ddf81 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:6a799cf88be01934944f24efadba5cb14d255b460a7228e1f5690d9dab08e8d7 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:ff46ecc10baf7f7670a9280fe8f5fd7a499db965971f45865e3dd28b7ca4283d |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:99a16c7798169c4de9e3c3df560b102003f03c94cd1327796ac4a6ca3c7d4f24 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:815f982a1c98589862e4cb396a23439e3c6cd171c74cf685f9939d73b6bdd03d |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:be43c775e7c7e6ebc6a6f79d62df27e7050ca625953b0f74abdbe8bcf4551dbe |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:b0abd996b07c44e9e7604569f758879a5c38b9fa85e3b0b39c7e4d6b45097e8a |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:5c0f6230d799906e5fdf647ace3a387db56e09b54d52d291c7ff5b2edbbb549a |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:e4dc1107ca9f5c3e7cf3575d021838dde38a3cecb3b12236939d0beb6db0e459 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:6e0e8904a5ce66bc0f7a07578d55fe1de5a6aaed2c38e9a4c5fa2d30a8f34b1f |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:af89ae01d4673da92ff562264d09203bb0aea3283ed61c53bea5ecaac1ea7a30 |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2eabb0104aa1eb25f1b5ad4822bf7cedc315bc2b0ea4df501af5d30f1412620d |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3eeb98b6b4a9e13fccf8e81a4aabf1efe2a64fcc43b4a451ab75d6f2f9042843 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:0ba1b3fa3a7a58d25cf7156cfa207e9f7ff0304e54a0dc5175c68a3810f00930 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:a30a7ee643a07f4051a749c3d095b3c1a40144aadeb4694b04833afadb5a50c5 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:9592965d6225d4d2fe4da7efb83db1241aefc4933767c68f585ef6db9c1e413a |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:c401d98d9948a8299e20137a6dbbc99a67420b3a47a4e037c42f65e2cccb805a |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7e3fe7c8f7868b08e1fb16fc82412055cf5291d11cb3ab0473944bd2c68479ba |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:cb526dd6bd0473d4bc13f174698ea619c5e5dbe5cf465c2c2193679232b0ae4c |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:107beee845fb13ddcb1c327a2a5fe705cc2f599c775786f937e17c0720977777 |
ppc64le
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:b927fed57e3e7e0775ec810400a068b3edaa36b9450628d6e1af097011759e95 |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:2ee4aa44ff12c0657060a5d5c460752a23df3643744a7ecfa789c93638c66698 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:6662394b01a5c16bdaa1eaac7949d1f0abab4e3ae09daf77b096d73a07116682 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:8917c1b09e582743ed4ea5df46213685de969bfbff656d039c2bc6c848772711 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:6ec632cf9a4c5d4d5511213c1856ce90d95b78af538b30cea9893d67c1fcd5db |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:ccb348bc3884e8f3324d30cb2c7d7ac25f90310ae7a04860da7ce6edcdaa078b |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:285fa8334f5437b1e0f8e21c23bd474cdee6b383a3cc91a67e0c9a34f3bd31f3 |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:8aa3516d4507c7db2ab74f9920c43bbf947051cda1786c5c846f4629c6389ba2 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:c26bc0ee702c25c928773f7b002ed2939d1be2a9b875e86e885e39ba4f2620d4 |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:01ccd04c7f846289acbba4c1d56ffbc24cd057be6f1cd089b1d8317c0f174ad7 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:9e839c3da194c00c7875340662b12caa026f5227f6325901fa6b311bd9cbfff3 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:e5d226a9456fdc6d7008e0ec4d55483f5e0c5bdb0120332e1734938176154b17 |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f23522e8d4bd2f14d07410a33437d3675b797788176beeb66c42f64006329cc2 |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4b147e241ea741dd0f13ecd8a84ae16843a65a04f09a2f3add8d7c940880b848 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:aec679c917fdbb273cb8fb67da83b09dc3305dbde1a4d4edf1ecd078188ab52c |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c86849eafabc1f41e651244c0f264a22908ca5385ee95418840c74225b0e450 |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:b6984dd286ba18eb6251a64ed60247891fc5d18fb26a3af2b9d6ac91b8bebe7e |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:3c60d70585dc0ab6b5eedc9716f5a8531bcb49eb75822f79b6b2e33e24b5926b |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:85c952b2c34b2d99199b2583e87e3c2ccbe900d837686e67ffb75ae13c40b4b0 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:07356ef57ffb077fc52ce681910916fbc927c581e2447ccbe60e4086b8d81b09 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:b711291f2f08108d50fc53b44b17df3e4614e1f653d0d5f8b2548a7c1b8983ef |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:c66c60e6f6d92086ba812398d66cec025a71914402c7f6e9b7cd7c6ac1d22648 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:ba619fd1055ec06103c2e32806b2c8b3fd13e8a1388f90c70aec862c5d153c8f |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b85e1cd475363b794a00194eccd61babe93705e6c6679a95457493e97e0dd75b |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:58ce162b9dcc276ea6d83e18fa08170b0ef047df7fc7a8957ee338d1359492eb |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:4d872d919c09d08132e0e056a60ad1e4c457fc600cd0521b0160d7f5106f4ea3 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:efb5ae4311c91dda0b3deae41996dc2e0b0ac8c98ff346cd38ea619d9226b95b |
s390x
| registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:46013beb1d8f782e92088ad4ea2d10155c67edb8d613966a5c069340bcac5ddd |
| registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:1223a63020ff47543dd4afd0b23fb378a46438e570bffe0d4660a036066e8869 |
| registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:1244fdf2ecb4dcc1e14e9a34150d56941e4d6658803b8cb14885d032b8fd4443 |
| registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:5e7ecd32c4b3891bfe7aeff7b8fedcb85c0df2b312d2e62cb3b51a8ee5727c6c |
| registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:bc09ad649d7461a01374451ab2b9ad1926ad1436917f62f9d266c4eeb29cb3d4 |
| registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:c01b60d63e12ff2538e4df40962c4a842ecbd5dabef3beccbbccc584f4373bcd |
| registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6d5b0771a8af890087ab0ff850f31c386d2fe537f2436ca45b330b4d06d624ac |
| registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:ba3cb0405e39b221a88fe5bfe1735a58ce33321e1ae93ea33c3ce00908f5fe47 |
| registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:fcda8fb54e0aff9fe84059c1bdfca15089327baaf1c7e4abb070292c22ad1ddf |
| registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:d028bfdac6125c30b8a4e1d26e14b18bcfa1720e8f37268e77e78aeb1a9275e5 |
| registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:9e35ad6d5753051e8468f7a91ee993453e413666d108eca651c2a4861c84a0e1 |
| registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:0b6fcf9297999bca37be509e40f14ed5911db4bc325ef04f17bc6d04b84d6a5f |
| registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:a1bcab43a493a6452acb4bc80f69da3f226fa70e676e8a66e97e92fb50b5fada |
| registry.redhat.io/multicluster-engine/hive-rhel9@sha256:49e81f0c647d869ddc0cee686721f66773099cce5421908e74085af7b0902286 |
| registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:6a9dd26d07a8bf57227ebbbba1895920efe9780526e7762bef2eac29e77dbc71 |
| registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:bf8e2668a45dc824243514ccdb6238233dac1a868695e732e90e1a01f657721a |
| registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:fd73067240668ea488d4f9558ae2f38c17cda8bb5bbdd569ecb4d1ac6dd5a839 |
| registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:ceee6026e023b6dc0365004c238258d289f8ddbb8fd9c4afd54be36e0f0362fb |
| registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:09eba4cc9d2b4cf826c17ea57f4c6a4960c69a22ae21138c01d69af2eb030c57 |
| registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:4897adbaf22a48629b43a498090c2e5578c30f309bede3eaa050145b8ec561e5 |
| registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:9c435520d1aaa9bdba12409241c65f836f9ed880a54014e0099fe3257b7a0969 |
| registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:d8ef2e3f50545515c39010afa3d55656a0845329fc03ca83fe4e1252918a2844 |
| registry.redhat.io/multicluster-engine/placement-rhel9@sha256:b3570ec2a487b8cfde96dc5eb8c1b1652d085af60ee5bdbdbcf20395520633e5 |
| registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:0f158c37a09710468001186605f11eebff160a737a8dcb1e838557f1b22bf530 |
| registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46f71fd1c155408171643cf823e5af50f425eef10d883819156d044f8158361 |
| registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:6141c33a5f0086b471b2839d6b16395dbf728d786b7ddd453fab474a74a88330 |
| registry.redhat.io/multicluster-engine/work-rhel9@sha256:280833b0f16b7c4906710244b1fb121c8aa554e641c507d594667e9620573386 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.