Red Hat Security Advisory

RHSA-2026:73397

OpenShift Virtualization v4.21 Images

Released 2026-09-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.21 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9

TI-2026-40999 CVE-2026-56862 · GHSA-7qch-w8m5-g3h3

MEDIUM 40

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-770