Red Hat Security Advisory

RHSA-2026:11330

Red Hat OpenShift Builds 1.6.5

Released 2026-04-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1

Fixes 3 records

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

gRPC-Go has an authorization bypass via missing leading slash in :path

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-26182 CVE-2026-33810 · GHSA-fv83-x2xw-2j55

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

MEDIUM 42

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00346 Published 2026-04-08 Partial fix · 1.26.2 CWE-295

TI-2026-25632 CVE-2026-33211 · GHSA-j5q5-j9gm-2w5c

Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod

MEDIUM 42

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00583 Published 2026-03-23 Partial fix · 1.0.1, 1.3.3 +3 CWE-22