Red Hat Security Advisory

RHSA-2026:69925

Red Hat OpenShift Builds 1.9.1

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +3

Fixes 1 record

TI-2026-40994 CVE-2026-56854 · GHSA-gjhq-gjfw-99mq

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

LOW 39

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-08-28 Partial fix · 0.55.0 CWE-863