RHSA-2026:36105 - Security Advisory

Topic

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images.

Description

Assisted Installer RHEL 8 integrates components for the general multicluster engine
for Kubernetes 2.6.12 release that simplify the process of deploying OpenShift Container
Platform clusters.

The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.

You can use the engine to create new Red Hat OpenShift Container Platform
clusters, or to import existing Kubernetes-based clusters for management.

After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.

Solution

For more information about Assisted Installer, see the following documentation:

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#cim-intro

For multicluster engine for Kubernetes, see the following documentation for
details on how to install the images:

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro

This documentation will be available after the general availability release of Red Hat Advanced Cluster Management 2.11.

Affected Products

• multicluster engine for Kubernetes

Fixes

CVEs

• CVE-2026-39821
• CVE-2026-39828
• CVE-2026-53488

References

• https://access.redhat.com/security/updates/classification/