Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.5 security update

🗓️ 15 Apr 2026 01:45:31Reported by RedHatType

redhat🔗 access.redhat.com👁 20 Views

Red Hat security advisory for the multicluster engine Kubernetes 2.8.5 provides fixes and image updates.

Reporter	Title	Published	Views	Family All 7613
OSV	CLEANSTART-2026-HJ72983 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-6g7g-w4f8-9c9x, ghsa-9h8m-3fm2-qjrq, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.35.17-r0, 1.35.17-r1, 1.35.2-r0, 1.35.2-r1, 1.35.2-r2	18 May 202613:35	–	osv
OSV	CLEANSTART-2026-HK01840 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-68121, CVE-2026-1229, CVE-2026-24051, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-9jj7-4m8r-rfcm, ghsa-hfvc-g4fc-pqhx, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.4-r2, 2.4.4-r4, 2.4.4-r5, 2.4.4-r6, 2.4.4-r7, 2.5.0-r0, 2.5.0-r1	18 May 202613:51	–	osv
OSV	CLEANSTART-2026-HK06185 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p436-gjf2-799p, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0, 3.7.9-r1, 3.7.9-r2, 4.0.2-r0	1 Apr 202609:27	–	osv
OSV	CLEANSTART-2026-HK71313 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r0, 0.12.0-r1, 0.12.0-r2	1 Apr 202609:06	–	osv
OSV	CLEANSTART-2026-HL71566 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate	30 Jan 202616:50	–	osv
OSV	CLEANSTART-2026-HM14899 url	10 Jun 202601:00	–	osv
OSV	CLEANSTART-2026-HM31566 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.15.0-r0	18 May 202612:59	–	osv
OSV	CLEANSTART-2026-HM40094 filippo	10 Apr 202601:03	–	osv
OSV	CLEANSTART-2026-HN09351 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.2.0-r0, 3.2.0-r1	13 Jul 202606:15	–	osv
OSV	CLEANSTART-2026-HN32363 Security fixes in tkn-fips 0.43.0-r0	30 Jul 202607:10	–	osv

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-13465
access	www.access.redhat.com/security/cve/CVE-2025-47907
access	www.access.redhat.com/security/cve/CVE-2025-58183
access	www.access.redhat.com/security/cve/CVE-2025-61726
access	www.access.redhat.com/security/cve/CVE-2025-61729
access	www.access.redhat.com/security/cve/CVE-2025-68121
access	www.access.redhat.com/security/cve/CVE-2026-22029
access	www.access.redhat.com/security/cve/CVE-2026-25639
access	www.access.redhat.com/security/cve/CVE-2026-29063
access	www.access.redhat.com/security/cve/CVE-2026-4740

29 Aug 2026 02:44Current

7High risk

Vulners AI Score7

CVSS 3.19.1 - 10

CVSS 48.7

EPSS0.02688

SSVC

multicluster engine kubernetes version 2.8.5 fixes image updates