Red Hat Security Advisory

RHSA-2026:2852

OpenShift Security Profiles Operator bug fix and enhancement update

Released 2026-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator

TI-2025-40975 CVE-2025-66564 · GHSA-4qg8-fj49-pxjh

LOW 39

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00475 Published 2025-12-04 Partial fix · 2.0.3 CWE-405

TI-2025-40928 CVE-2025-66506 · GHSA-f83f-xpx7-ffpw

LOW 38

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00226 Published 2025-12-04 Partial fix · 1.8.3 CWE-405