Skip to main content
EPSS 0.7%top 48%

Red Hat Security Advisory: Red Hat Multicluster GlobalHub 1.2.3 bug fixes and container updates

0
High
Published: 06/23/2025 (06/23/2025, 15:10:48 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat multicluster global hub 1.2.3 images This advisory contains the container images for Red Hat multicluster global hub. These container images provide enhancements and fix several bugs. Security fixes: * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

Affected software

Affected versions
>=2.7.0 <2.7.5>=0.12.0 <0.12.2>=1.2.3 <1.2.4Red Hatmulticluster engine for Kubernetesmulticluster engine for Kubernetes 2.7 for RHEL 9multicluster engine for Kubernetes 2.7 for RHEL 8arm64Red Hat Advanced Cluster Management for KubernetesRed Hat Advanced Cluster Management for Kubernetes 2.13amd64registry.redhat.io/rhacm2/volsync-rhel9@sha256:dec387317abbe8f550227d41a8b5cf48b054c31d077c818de7cc6b927e04295d_amd64Red Hat Advanced Cluster Management for Kubernetes 2.14registry.redhat.io/rhacm2/volsync-rhel9@sha256:d2226b5ec3e213aa92b18bf0d8c2d4d0f277fcbf7ad0c5b2fcbbfa72cf256269_amd64Red Hat OpenShift Container PlatformRed Hat OpenShift Container Platform 4.13registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:006ba1f0a51bd4d09c7218964c9e4c17a884a71c9c645312948f219938401631_amd64Red Hat Enterprise LinuxRed Hat Enterprise Linux AppStream (v. 9)srcopentelemetry-collector-0:0.107.0-10.el9_5.srcRed Hat OpenShift EnterpriseRed Hat OpenShift Container Platform 4.17openshift4/ose-cluster-network-rhel9-operator@sha256:0a90a7f5271a2dc014d99bc67884b7041aefc822cefa08f7edf070e74c745819_amd64Red Hat Enterprise Linux AppStream EUS (v.9.2)grafana-0:9.0.9-6.el9_2.srcRed Hat Enterprise Linux AppStream EUS (v.9.4)grafana-0:9.2.10-22.el9_4.srcregistry.redhat.io/openshift4/ose-telemeter@sha256:27725970ffec2136048b51e027f39b77ff3efee8bc19b1afd8d1ab5eb5d4b5b4_amd64opentelemetry-collector-0:0.107.0-8.el9_4.srclogging for Red Hat OpenShiftRHOL 6.0 for RHEL 9ppc64leopenshift-logging/cluster-logging-rhel9-operator@sha256:4c330f63c66355b8cd3e55ad603f44d909817ef51da5d1eb452d647da28457d8_ppc64leRHOL 6.1 for RHEL 9openshift-logging/cluster-logging-rhel9-operator@sha256:385ca0686fede6d1407cbe93dd7436ded1fdd1835251df05c72d534f217888eb_arm64osbuild-composer-0:101.3-1.el9_4.srcosbuild-composer-0:76.1-1.el9_2.srcosbuild-composer-0:118.2-1.el9_5.srcgrafana-0:10.2.6-11.el9_6.srcosbuild-composer-0:132.2-1.el9_6.srcRed Hat Enterprise Linux AppStream (v. 10)grafana-0:10.2.6-15.el10_0.srcosbuild-composer-0:134.1-1.el10_0.srcregistry.redhat.io/openshift4/ose-cluster-network-operator@sha256:4311cfd1c3688b7d8d9b78d3fe7e5a0fd88629f1b5c2c4563c75a57469deecf6_amd64Red Hat Enterprise Linux AppStream (v. 8)osbuild-composer-0:101-3.el8_10.srcRed Hat Enterprise Linux AppStream EUS (v.8.8)osbuild-composer-0:75-3.el8_8.srcmulticluster-globalhubmulticluster-globalhub 1.4 for RHEL 9multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:dfd05d87b8ee85e5bf0584d49491da51b5869a25cb466e950cf4297f96116411_ppc64leRed Hat ACMRed Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-cli-rhel9@sha256:46ed5452c49e9f6a3e86e982bc4fa81be433494da27a3128d90f1d8ea547ef16_ppc64leRed Hat Enterprise Linux AppStream E4S (v.9.0)osbuild-composer-0:46.3-3.el9_0.srcRed Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8rhacm2/acm-cluster-permission-rhel8@sha256:67ddc763611737867ee5be68b9854286a3f009b6e82dcb5906e318c2a6d9df6c_amd64Red Hat OpenShift Container Platform 4.18s390xopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:324c2031f89bcdc8c173b44b3ebb208da5f09bc290f85d40eb534fb2e610fca1_s390xopenshift4/ose-cluster-network-rhel9-operator@sha256:002a3b2e7a4f02538ef4b941d299e2a36a42180b7ca674c084aab1e75c4781fc_amd64Red Hat OpenShift Container Platform 4.15multicluster-globalhub 1.2 for RHEL 9multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2d55e1657efcf6f3c0476958a3415e59455a14be10bc89e6d4fd768459e113eb_s390x

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/10/2026, 18:23:06 UTC

Technical Analysis

The Multicluster engine for Kubernetes prior to version 2.7.5 contains a vulnerability in the golang-jwt/jwt library (CVE-2025-30204) that permits excessive memory allocation during JWT header parsing. This could potentially lead to resource exhaustion or denial of service conditions. Red Hat has released version 2.7.5 of the Multicluster engine which includes security updates and bug fixes to address this issue. The engine is used for centralized management of Kubernetes clusters across data centers and cloud environments, facilitating cluster creation, import, and configuration distribution via APIs. The advisory also references updates to VolSync v0.12 with security fixes. The vendor advisory confirms the availability of fixed images and provides detailed installation and update instructions.

Potential Impact

The vulnerability allows excessive memory allocation during JWT header parsing, which may lead to denial of service or resource exhaustion in affected Multicluster engine components. This impacts the stability and reliability of centralized Kubernetes cluster management operations. No known exploits in the wild have been reported. The impact is rated as high by Red Hat due to the potential for disruption in critical cluster management infrastructure.

Mitigation Recommendations

Red Hat has released Multicluster engine for Kubernetes version 2.7.5 which includes fixes for CVE-2025-30204. Users should upgrade to version 2.7.5 or later to remediate this vulnerability. Updated container images and installation instructions are available in the Red Hat documentation. No additional mitigations are required beyond applying the official update. The vendor manages remediation for this product via these updated releases.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2025:9388
Cve Count
1

Threat ID: 6a160970e29bf47b5063854e

Added to database: 05/26/2026, 20:58:24 UTC

Last enriched: 08/10/2026, 18:23:06 UTC

Last updated: 09/10/2026, 22:04:10 UTC

Views: 58

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

External Links

NVD DatabaseMITRE CVEhttps://access.redhat.com/errata/RHSA-2025:11573https://access.redhat.com/security/updates/classification/#important2354195Canonical URLhttps://access.redhat.com/errata/RHSA-2025:15872https://access.redhat.com/security/cve/CVE-2025-30204https://access.redhat.com/security/updates/classification/Canonical URLhttps://access.redhat.com/errata/RHSA-2025:16595Canonical URLhttps://access.redhat.com/errata/RHSA-2025:18241Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3565OCPBUGS-34228OCPBUGS-51277OCPBUGS-52951OCPBUGS-53378OCPBUGS-54357Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3411Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3616Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3618Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3698Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3905LOG-6990Canonical URLhttps://access.redhat.com/errata/RHSA-2025:3907LOG-6991LOG-6996Canonical URLhttps://access.redhat.com/errata/RHSA-2025:4462Canonical URLhttps://access.redhat.com/errata/RHSA-2025:4669Canonical URLhttps://access.redhat.com/errata/RHSA-2025:4569Canonical URLhttps://access.redhat.com/errata/RHSA-2025:7404Canonical URLhttps://access.redhat.com/errata/RHSA-2025:7425Canonical URLhttps://access.redhat.com/errata/RHSA-2025:7475Canonical URLhttps://access.redhat.com/errata/RHSA-2025:7503Canonical URLhttps://access.redhat.com/errata/RHSA-2025:7967Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8075Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8267Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8384Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8392https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html/release_notes/Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8542https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/release_notes/ACM-17263ACM-19579ACM-19714ACM-19926ACM-20085ACM-20600Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8560OCPBUGS-30260OCPBUGS-53428OCPBUGS-56384OCPBUGS-56659OCPBUGS-56703OCPBUGS-56732OCPBUGS-56757OCPBUGS-56793OCPBUGS-56823OCPBUGS-56864OCPBUGS-56919Canonical URLhttps://access.redhat.com/errata/RHSA-2025:8552OCPBUGS-35944OCPBUGS-55924OCPBUGS-56375OCPBUGS-56794OCPBUGS-56828OCPBUGS-56844Canonical URLhttps://access.redhat.com/errata/RHSA-2025:9259OCPBUGS-46467OCPBUGS-56463OCPBUGS-56474OCPBUGS-56649OCPBUGS-57097OCPBUGS-57121OCPBUGS-57340Canonical URLhttps://access.redhat.com/errata/RHSA-2025:9388Canonical URLSearch on Google

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses