Red Hat Security Advisory

RHSA-2026:22299

Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2

Released 2026-06-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9

Fixes 2 records

TI-2026-24810 CVE-2026-32281 · GHSA-gjvh-7jh8-7xhm

Inefficient policy validation in crypto/x509

LOW 39

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00361 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-295

TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

LOW 30

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00297 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-59