Red Hat Security Advisory

RHSA-2026:11800

Logging for Red Hat OpenShift - 6.2.10

Released 2026-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/vector-rhel9

Fixes 3 records

TI-2026-25296 CVE-2026-32829 · GHSA-vvp9-7p8x-rfvv

lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer

MEDIUM 43

lz4_flex is a pure Rust implementation of LZ4 compression/decompression.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00633 Published 2026-03-20 Fixed in 0.11.6, 0.12.1 CWE-201

TI-2026-21587 CVE-2026-27137 · GHSA-7hfw-r8qc-89v4

Incorrect enforcement of email constraints in crypto/x509

MEDIUM 40

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2026-03-06 Partial fix · 1.26.1 CWE-295

TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8

Incorrect parsing of IPv6 host literals in net/url

MEDIUM 40

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2026-03-06 Partial fix · 1.25.8, 1.26.1 CWE-425