Known issues#
This section describes the MSR known issues with available workarounds, along with a list of current product limitations:
Critical CVEs in MSR 2.10 component images#
Security scans of MSR 2.10 might report the following critical vulnerabilities in product component images.
| Component | Vulnerability | CVE | Installed version | Fixed version |
|---|---|---|---|---|
dtr-postgres |
libcrypto3 (OS package) |
CVE-2026-34182 | 3.5.6-r0 | 3.5.7-r0 |
dtr-postgres |
libssl3 (OS package) |
CVE-2026-34182 | 3.5.6-r0 | 3.5.7-r0 |
These findings present low practical risk for typical MSR deployments:
- The
libcrypto3andlibssl3packages are present in thedtr-postgresimage. This image is not exposed to external networks.
Resolution
Mirantis plans to address these CVEs in a future release.