Read the docs
TI-2024-30408 Aliases CVE-2024-45338GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Priority LOW 32CWE-1333Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
Partial Red Hat: 80 fixed, 30 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-1333.

Summary

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01072 65th percentileScored 2026-11-07
Fix Partial golang.org/x/net/html (golang.org/x/net): 0.33.0golang.org/x/net/html (Go): 0.33.0Red Hat: 140 advisoriesRed Hat: 80 fixed, 30 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarygolang.org/x/net/htmlbefore 0.33.00.33.0Patch availableCNA
—golang.org/x/net/html (Go)before 0.33.00.33.0Patch availableGHSA-w32m-9786-jp63
  • golang.org/x/net/html VendorGo standard library Affected before 0.33.0 Fixed in 0.33.0 Patch available CNA
  • golang.org/x/net/html (Go) Vendor— Affected before 0.33.0 Fixed in 0.33.0 Patch available GHSA-w32m-9786-jp63

Remediation

  • Fix · CNA golang.org/x/net/html (golang.org/x/net) Fixed in 0.33.0
  • Fix · GHSA-w32m-9786-jp63 golang.org/x/net/html (Go) Fixed in 0.33.0 Advisory →

Red Hat 140 advisories

  • RHSA-2026:34342 Released 2026-07-01 · Red Hat rating Critical
    Cluster Observability Operator 1.5.0
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9 +9
  • RHSA-2026:6568 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.15.4
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:2762 Released 2026-02-16 · Red Hat rating Important
    Red Hat Quay 3.10.18
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
Show 137 more Red Hat advisories
  • RHSA-2026:2754 Released 2026-02-16 · Red Hat rating Important
    Red Hat Quay 3.9.18
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:2681 Released 2026-02-12 · Red Hat rating Important
    Red Hat Quay 3.16.2
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-builder-rhel9, registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:1730 Released 2026-02-02 · Red Hat rating Important
    Red Hat Quay 3.12.13
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23207 Released 2025-12-15 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.16.5 security update
    • Red Hat OpenShift GitOps 1.16 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel8 +1
  • RHSA-2025:23206 Released 2025-12-15 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.17.3 security update
    • Red Hat OpenShift GitOps 1.17 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel8 +1
  • RHSA-2025:23064 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.10.17
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:23061 Released 2025-12-10 · Red Hat rating Important
    Red Hat Quay 3.9.17
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-container-security-operator-rhel8, registry.redhat.io/quay/quay-operator-rhel8 +1
  • RHSA-2025:22287 Released 2025-11-27 · Red Hat rating Important
    Red Hat Quay 3.9
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:22182 Released 2025-11-26 · Red Hat rating Important
    Red Hat Quay 3.10.16
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-operator-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2025:21704 Released 2025-11-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2025:16483 Released 2025-09-23 · Red Hat rating Important
    OpenShift Virtualization 4.12.20 Images
    • CNV 4.12 for RHEL 8 container-native-virtualization/bridge-marker, container-native-virtualization/cluster-network-addons-operator, container-native-virtualization/cnv-containernetworking-plugins +40
  • RHSA-2025:15673 Released 2025-09-18 · Red Hat rating Important
    OpenShift Container Platform 4.13.60 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8 +8
  • RHSA-2025:15847 Released 2025-09-15 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.23.0 Release.
    • Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/machineexec-rhel9 +3
  • RHSA-2025:15332 Released 2025-09-11 · Red Hat rating Important
    OpenShift Container Platform 4.12.80 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8 +6
  • RHSA-2025:11669 Released 2025-07-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-registry, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8, openshift4/ose-nutanix-machine-controllers-rhel8
  • RHSA-2025:11749 Released 2025-07-24 · Red Hat rating Important
    Updated 8.1 container image is now available: security and bug fix update
    • Red Hat Ceph Storage 8.1 Tools rhceph/grafana-rhel9
  • RHSA-2025:11396 Released 2025-07-18 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update
    • 9Base-OADP-1.4 oadp/oadp-kubevirt-velero-plugin-rhel9, oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator +5
  • RHSA-2025:9761 Released 2025-07-02 · Red Hat rating Important
    OpenShift Container Platform 4.14.53 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-sriov-network-config-daemon
  • RHSA-2025:9646 Released 2025-06-25 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.3.7 security and bug fix update
    • 9Base-OADP-1.3 oadp/oadp-kubevirt-velero-plugin-rhel9, oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator +6
  • RHSA-2025:9340 Released 2025-06-23 · Red Hat rating Important
    Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 7.1 Tools rhceph/grafana-rhel9, rhceph/rhceph-7-rhel9, rhceph/rhceph-promtail-rhel9
  • RHSA-2024:11038 Released 2025-06-17 · Red Hat rating Important
    OpenShift Container Platform 4.19.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 openshift4/ose-aws-ebs-csi-driver-rhel9, openshift4/ose-azure-disk-csi-driver-rhel9, openshift4/ose-azure-file-csi-driver-rhel9 +14
  • RHSA-2024:11037 Released 2025-06-17 · Red Hat rating Important
    OpenShift Container Platform 4.19.0 security and extras update
    • Red Hat OpenShift Container Platform 4.19 openshift4/ose-aws-efs-csi-driver-container-rhel9, openshift4/ose-gcp-filestore-csi-driver-rhel9, openshift4/ose-local-storage-diskmaker-rhel9 +3
  • RHSA-2025:9136 Released 2025-06-16 · Red Hat rating Moderate
    Red Hat OpenShift for Windows Containers 10.16.2 product release
    • OpenShift Windows Machine Config Operator 10.16 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2025:8556 Released 2025-06-13 · Red Hat rating Important
    OpenShift Container Platform 4.16.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-image-registry-rhel9-operator, openshift4/ose-console-rhel9, openshift4/ose-docker-registry-rhel9 +1
  • RHSA-2025:8551 Released 2025-06-04 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.14.18 Bug Fix Update
    • RHODF 4.14 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/odf-console-rhel9, odf4/odf-multicluster-console-rhel9 +1
  • RHSA-2025:8544 Released 2025-06-04 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.15.14 Bug Fix Update
    • RHODF 4.15 for RHEL 9 odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9, odf4/odf-console-rhel9 +2
  • RHSA-2025:8510 Released 2025-06-04 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.7 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-ui-rhel8
  • RHSA-2025:8280 Released 2025-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.17.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2025:8479 Released 2025-06-04 · Red Hat rating Important
    RHODF-4.16-RHEL-9 security update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +4
  • RHSA-2025:8301 Released 2025-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.15.52 security and extras update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-sriov-network-config-daemon-rhel9
  • RHSA-2025:8059 Released 2025-05-21 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.17.7 Bug Fix Update
    • RHODF 4.17 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +8
  • RHSA-2025:7449 Released 2025-05-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 5.9.14
    • RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9
  • RHSA-2025:7451 Released 2025-05-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 5.8.20
    • RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
  • RHSA-2025:4007 Released 2025-04-23 · Red Hat rating Important
    OpenShift Container Platform 4.16.39 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-sriov-network-config-daemon-rhel9
  • RHSA-2025:3973 Released 2025-04-17 · Red Hat rating Important
    OpenShift Virtualization 4.16.7 Images
    • CNV 4.16 for RHEL 9 container-native-virtualization/aaq-controller-rhel9, container-native-virtualization/aaq-operator-rhel9, container-native-virtualization/aaq-server-rhel9 +47
  • RHSA-2025:3573 Released 2025-04-10 · Red Hat rating Important
    OpenShift Container Platform 4.12.75 packages and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-docker-builder +5
  • RHSA-2025:3560 Released 2025-04-03 · Red Hat rating Important
    RHODF-4.14-RHEL-9 security update
    • RHODF 4.14 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator
  • RHSA-2025:3542 Released 2025-04-02 · Red Hat rating Important
    RHODF-4.15-RHEL-9 security update
    • RHODF 4.15 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator
  • RHSA-2025:3502 Released 2025-04-01 · Red Hat rating Important
    RHODF-4.16-RHEL-9 security update
    • RHODF 4.16 for RHEL 9 odf4/mcg-rhel9-operator
  • RHSA-2025:3500 Released 2025-04-01 · Red Hat rating Important
    RHODF-4.17-RHEL-9 security update
    • RHODF 4.17 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator
  • RHSA-2025:3397 Released 2025-03-31 · Red Hat rating Important
    RHOAI 2.16.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-codeflare-operator-rhel8, registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8 +13
  • RHSA-2025:3374 Released 2025-03-27 · Red Hat rating Important
    Red Hat Developer Hub 1.5.1 release.
    • Red Hat Developer Hub 1.5 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2025:3368 Released 2025-03-27 · Red Hat rating Important
    RHOAI 2.16.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-codeflare-operator-rhel8, registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8 +13
  • RHSA-2025:3131 Released 2025-03-26 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.1.4
    • RHOL 6.1 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +7
  • RHSA-2025:3132 Released 2025-03-26 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.6
    • RHOL 6.0 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +7
  • RHSA-2025:3069 Released 2025-03-20 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.14.3 security update
    • Red Hat OpenShift GitOps 1.14 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
  • RHSA-2025:2701 Released 2025-03-20 · Red Hat rating Important
    OpenShift Container Platform 4.13.56 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-node-agent-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8 +3
  • RHSA-2025:2700 Released 2025-03-20 · Red Hat rating Important
    OpenShift Container Platform 4.13.56 security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-ansible-operator, openshift4/ose-cloud-event-proxy, openshift4/ose-cloud-event-proxy-rhel8
  • RHSA-2025:2710 Released 2025-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.14.49 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-docker-builder, rhcos
  • RHSA-2025:2933 Released 2025-03-17 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.18.0
    • Red Hat OpenShift Pipelines 1.18.0 registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9
  • RHSA-2025:2903 Released 2025-03-17 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.18.0
    • Red Hat OpenShift Pipelines 1.18.0 registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9
  • RHSA-2025:2441 Released 2025-03-13 · Red Hat rating Important
    OpenShift Container Platform 4.12.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-docker-builder +2
  • RHSA-2025:2440 Released 2025-03-13 · Red Hat rating Important
    OpenShift Container Platform 4.12.74 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-event-proxy-rhel8, openshift4/ose-cloud-event-proxy, openshift4/ose-cloud-event-proxy-rhel8
  • RHSA-2025:2658 Released 2025-03-11 · Red Hat rating Important
    OpenShift Virtualization 4.15.9 Images
    • CNV 4.15 for RHEL 9 container-native-virtualization/kubevirt-ssp-operator-rhel9, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9 +2
  • RHSA-2025:2652 Released 2025-03-11 · Red Hat rating Important
    RHODF-4.18-RHEL-9 enhancement, bug fix and security update
    • RHODF 4.18 for RHEL 9 odf4/cephcsi-rhel9, odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9 +3
  • RHSA-2025:2449 Released 2025-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.4 security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-docker-builder-rhel9, openshift4/ose-nutanix-machine-controllers-rhel9 +6
  • RHSA-2025:2588 Released 2025-03-10 · Red Hat rating Important
    RHOAI 2.18.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.18 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel8, registry.redhat.io/rhoai/odh-modelmesh-rhel8 +2
  • RHSA-2025:2415 Released 2025-03-05 · Red Hat rating Important
    Red Hat Insights for Runtimes security update
    • Red Hat Insights for Runtimes 1.0 registry.redhat.io/insights-runtimes-tech-preview/runtimes-inventory-rhel8-operator
  • RHSA-2025:1711 Released 2025-02-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.46 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-builder, openshift4/ose-operator-marketplace-rhel9, rhcos
  • RHSA-2025:1710 Released 2025-02-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.46 security and extras update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ansible-operator, openshift4/ose-node-feature-discovery-rhel9
  • RHSA-2025:1866 Released 2025-02-26 · Red Hat rating Important
    RHODF-4.14-RHEL-9 security update
    • RHODF 4.14 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator +3
  • RHSA-2025:1865 Released 2025-02-26 · Red Hat rating Important
    RHODF-4.15-RHEL-9 security update
    • RHODF 4.15 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator +4
  • RHSA-2025:1853 Released 2025-02-25 · Red Hat rating Important
    RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/rhtas-rhel9-operator
  • RHSA-2025:1841 Released 2025-02-25 · Red Hat rating Important
    RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/timestamp-authority-rhel9
  • RHSA-2025:1838 Released 2025-02-25 · Red Hat rating Important
    OpenShift Virtualization 4.18.0 Images
    • CNV 4.18 for RHEL 9 container-native-virtualization/kubevirt-ssp-operator-rhel9, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9 +2
  • RHSA-2025:1829 Released 2025-02-25 · Red Hat rating Important
    RHODF-4.16-RHEL-9 security update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/ocs-client-console-rhel9, odf4/ocs-rhel9-operator +5
  • RHSA-2025:1824 Released 2025-02-25 · Red Hat rating Important
    RHODF-4.17-RHEL-9 security update
    • RHODF 4.17 for RHEL 9 odf4/cephcsi-rhel9, odf4/ocs-client-console-rhel9, odf4/odf-cli-rhel9 +3
  • RHSA-2024:6122 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2024:6121 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 security and extras update
    • Red Hat OpenShift Container Platform 4.18 openshift4/ingress-node-firewall-rhel9, openshift4/ingress-node-firewall-rhel9-operator, openshift4/kube-compare-artifacts-rhel9 +47
  • RHSA-2025:1451 Released 2025-02-19 · Red Hat rating Important
    OpenShift Container Platform 4.14.48 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-operator-marketplace, rhcos
  • RHSA-2025:1386 Released 2025-02-19 · Red Hat rating Important
    OpenShift Container Platform 4.16.35 security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-operator-marketplace-rhel9, rhcos
  • RHSA-2025:1450 Released 2025-02-19 · Red Hat rating Important
    OpenShift Container Platform 4.14.48 security and extras update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-node-feature-discovery
  • RHSA-2025:1609 Released 2025-02-17 · Red Hat rating Important
    Cluster Observability Operator 1.0.0
    • Cluster Observability Operator 1.0.0 registry.redhat.io/cluster-observability-operator/cluster-observability-rhel8-operator
  • RHSA-2025:1468 Released 2025-02-13 · Red Hat rating Important
    ACS 4.4 enhancement and security update
    • RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +1
  • RHSA-2025:1448 Released 2025-02-13 · Red Hat rating Important
    RHOAI 2.17.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.17 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel8 +5
  • RHSA-2025:1116 Released 2025-02-13 · Red Hat rating Important
    OpenShift Container Platform 4.13.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-baremetal-machine-controllers, openshift4/ose-ibmcloud-machine-controllers-rhel8, openshift4/ose-nutanix-cloud-controller-manager-rhel8 +4
  • RHSA-2025:1115 Released 2025-02-13 · Red Hat rating Important
    OpenShift Container Platform 4.13.55 security and extras update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-ptp-operator
  • RHSA-2025:1332 Released 2025-02-12 · Red Hat rating Important
    Gatekeeper v3.15.3
    • gatekeeper 3.15 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2025:1331 Released 2025-02-12 · Red Hat rating Important
    Gatekeeper v3.17.1
    • gatekeeper 3.17 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2025:1333 Released 2025-02-12 · Red Hat rating Important
    Gatekeeper v3.14.3
    • gatekeeper 3.14 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2025:1128 Released 2025-02-12 · Red Hat rating Important
    OpenShift Container Platform 4.15.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-node-agent-rhel9 +2
  • RHSA-2025:1123 Released 2025-02-12 · Red Hat rating Important
    OpenShift Container Platform 4.16.34 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ansible-rhel9-operator, openshift4/ose-helm-rhel9-operator, openshift4/ose-operator-sdk-rhel9
  • RHSA-2025:1334 Released 2025-02-11 · Red Hat rating Important
    ACS 4.5 enhancement and security update
    • RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator +5
  • RHSA-2025:1324 Released 2025-02-11 · Red Hat rating Important
    RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/timestamp-authority-rhel9
  • RHSA-2025:1120 Released 2025-02-11 · Red Hat rating Important
    OpenShift Container Platform 4.17.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-operator-marketplace-rhel9, rhcos
  • RHSA-2025:1119 Released 2025-02-11 · Red Hat rating Important
    OpenShift Container Platform 4.17.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-helm-rhel9-operator, openshift4/ose-operator-sdk-rhel9, openshift4/ose-sriov-network-config-daemon-rhel9
  • RHSA-2025:1289 Released 2025-02-11 · Red Hat rating Important
    RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/timestamp-authority-rhel9
  • RHSA-2025:0840 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.14.46 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-baremetal-machine-controllers +2
  • RHSA-2025:0839 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.14.46 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-event-proxy-rhel8, openshift4/ose-cloud-event-proxy-rhel8, openshift4/ose-ptp-operator +1
  • RHSA-2025:0827 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.16.33 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-node-feature-discovery-rhel9
  • RHSA-2025:0832 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.72 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-baremetal-machine-controllers, openshift4/ose-nutanix-machine-controllers-rhel8, openshift4/ose-openshift-apiserver-rhel8 +3
  • RHSA-2025:0831 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.72 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-ptp-operator
  • RHSA-2025:0875 Released 2025-02-05 · Red Hat rating Important
    OpenShift Container Platform 4.17.15 security and extras update
    • Red Hat OpenShift Container Platform 4.17 openshift4/nmstate-console-plugin-rhel9, openshift4/ose-ansible-rhel9-operator, openshift4/ose-helm-rhel9-operator +2
  • RHSA-2025:1053 Released 2025-02-05 · Red Hat rating Important
    Red Hat OpenShift Service Mesh Containers for 2.6.5
    • RHOSSM 2.6 for RHEL 9 openshift-service-mesh/proxyv2-rhel9
  • RHSA-2025:1051 Released 2025-02-05 · Red Hat rating Important
    Red Hat OpenShift Service Mesh Containers for 2.5.8
    • RHOSSM 2.5 for RHEL 8 openshift-service-mesh/kiali-ossmc-rhel8, openshift-service-mesh/kiali-rhel8, openshift-service-mesh/proxyv2-rhel8
  • RHSA-2025:1050 Released 2025-02-05 · Red Hat rating Important
    Red Hat OpenShift Service Mesh Containers for 2.4.14
    • RHOSSM 2.4 for RHEL 8 openshift-service-mesh/kiali-rhel8
  • RHSA-2025:1013 Released 2025-02-04 · Red Hat rating Important
    RHSA: Submariner 0.19.2 - bug fix and enhancement update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6
  • RHSA-2025:0907 Released 2025-02-03 · Red Hat rating Critical
    ACS 4.6.2 enhancement and security update
    • RHACS 4.6 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
  • RHSA-2025:0905 Released 2025-02-03 · Red Hat rating Important
    RHOAI 2.16.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel8, registry.redhat.io/rhoai/odh-rhel8-operator, registry.redhat.io/rhoai/odh-training-operator-rhel8 +1
  • RHSA-2025:0892 Released 2025-02-03 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.18.0 release
    • Red Hat OpenShift Dev Spaces 3 devspaces/code-rhel9, devspaces/dashboard-rhel9, devspaces/devspaces-rhel9-operator +1
  • RHSA-2025:0851 Released 2025-01-30 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.12.2 security and bug fix updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/acm-cli-rhel9, rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9 +43
  • RHSA-2025:0821 Released 2025-01-29 · Red Hat rating Important
    RHSA: Submariner 0.17.5 - bug and security fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6
  • RHSA-2025:0646 Released 2025-01-29 · Red Hat rating Important
    OpenShift Container Platform 4.15.44 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-baremetal-machine-controllers-rhel9, openshift4/ose-operator-lifecycle-manager-rhel9, openshift4/ose-operator-registry-rhel9 +1
  • RHSA-2025:0645 Released 2025-01-29 · Red Hat rating Important
    OpenShift Container Platform 4.15.44 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-baremetal-cluster-api-controllers-rhel9, openshift4/ose-cloud-event-proxy-rhel9, openshift4/ose-ptp-rhel9 +1
  • RHSA-2025:0650 Released 2025-01-29 · Red Hat rating Important
    OpenShift Container Platform 4.16.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-baremetal-machine-controllers-rhel9, openshift4/ose-docker-builder-rhel9 +4
  • RHSA-2025:0649 Released 2025-01-29 · Red Hat rating Important
    OpenShift Container Platform 4.16.32 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-baremetal-cluster-api-controllers-rhel9, openshift4/ose-cloud-event-proxy-rhel9, openshift4/ose-ptp-rhel9 +1
  • RHSA-2025:0785 Released 2025-01-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.11.5 bug fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9, rhacm2/acm-governance-policy-framework-addon-rhel9 +40
  • RHSA-2025:0778 Released 2025-01-28 · Red Hat rating Important
    Multicluster Engine for Kubernetes 2.6.5 security updates and bug fixes
    • multicluster engine for Kubernetes 2.6 for RHEL 8 multicluster-engine/assisted-image-service-rhel8, multicluster-engine/assisted-installer-agent-rhel8, multicluster-engine/assisted-installer-controller-rhel8 +2
    • multicluster engine for Kubernetes 2.6 for RHEL 9 multicluster-engine/addon-manager-rhel9, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/backplane-rhel9-operator +27
  • RHSA-2025:0783 Released 2025-01-28 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.6 Bug fix update
    • RHODF 4.16 for RHEL 9 odf4/mcg-core-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator
  • RHSA-2025:0775 Released 2025-01-28 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.17.3 Bug Fix Update
    • RHODF 4.17 for RHEL 9 odf4/mcg-core-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator
  • RHSA-2025:0754 Released 2025-01-28 · Red Hat rating Important
    Red Hat OpenShift Builds 1.2
    • Builds for Red Hat OpenShift 1.2.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2025:0654 Released 2025-01-28 · Red Hat rating Important
    OpenShift Container Platform 4.17.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/oc-mirror-plugin-rhel9, openshift4/ose-agent-installer-api-server-rhel9, openshift4/ose-baremetal-cluster-api-controllers-rhel9 +6
  • RHSA-2025:0653 Released 2025-01-28 · Red Hat rating Important
    OpenShift Container Platform 4.17.14 security and extras update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-cloud-event-proxy-rhel9, openshift4/ose-ptp-rhel9, openshift4/ose-ptp-rhel9-operator
  • RHSA-2025:0715 Released 2025-01-27 · Red Hat rating Important
    Red Hat OpenShift Builds 1.1
    • Builds for Red Hat OpenShift 1.1.1 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2025:0679 Released 2025-01-23 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.10.7 bug fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9, rhacm2/acm-governance-policy-framework-addon-rhel9 +41
  • RHSA-2025:0678 Released 2025-01-23 · Red Hat rating Important
    RHSA: Submariner 0.16.8 - bug and security fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 rhacm2/lighthouse-agent-rhel8, rhacm2/lighthouse-coredns-rhel8, rhacm2/nettest-rhel8 +6
  • RHSA-2025:0576 Released 2025-01-22 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.9.6 bug fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 rhacm2/acm-cluster-permission-rhel8, rhacm2/acm-governance-policy-addon-controller-rhel8, rhacm2/acm-governance-policy-framework-addon-rhel8 +41
  • RHSA-2025:0364 Released 2025-01-22 · Red Hat rating Important
    OpenShift Container Platform 4.14.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-cloud-credential-operator, rhcos
  • RHSA-2025:0577 Released 2025-01-22 · Red Hat rating Important
    Red Hat multicluster global hub 1.3.2 enhancements and container updates
    • multicluster-globalhub 1.3 for RHEL 9 multicluster-globalhub/multicluster-globalhub-agent-rhel9, multicluster-globalhub/multicluster-globalhub-grafana-rhel9, multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9 +4
  • RHSA-2025:0552 Released 2025-01-21 · Red Hat rating Important
    Multicluster Engine for Kubernetes 2.4.7 security updates and bug fixes
    • multicluster engine for Kubernetes 2.4 for RHEL 8 multicluster-engine/addon-manager-rhel8, multicluster-engine/agent-service-rhel8, multicluster-engine/apiserver-network-proxy-rhel8 +34
  • RHSA-2025:0560 Released 2025-01-21 · Red Hat rating Important
    Red Hat Multicluster GlobalHub 1.2.1 bug fixes and container updates
    • multicluster-globalhub 1.2 for RHEL 9 multicluster-globalhub/multicluster-globalhub-agent-rhel9, multicluster-globalhub/multicluster-globalhub-grafana-rhel9, multicluster-globalhub/multicluster-globalhub-manager-rhel9 +3
  • RHSA-2025:0536 Released 2025-01-21 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.15.0
    • cert-manager operator for Red Hat OpenShift 1.15 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2025:0535 Released 2025-01-21 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.15.0
    • cert-manager operator for Red Hat OpenShift 1.15 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2025:0522 Released 2025-01-21 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release
    • Red Hat OpenShift distributed tracing 3.4 registry.redhat.io/rhosdt/jaeger-agent-rhel8, registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8, registry.redhat.io/rhosdt/jaeger-collector-rhel8 +5
  • RHSA-2025:0485 Released 2025-01-21 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.15.0
    • cert-manager operator for Red Hat OpenShift 1.15 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2025:0445 Released 2025-01-20 · Red Hat rating Important
    Red Hat Trusted Profile Analyzer 1.2.2
    • Red Hat Trusted Profile Analyzer 1.2 registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9
  • RHSA-2025:0444 Released 2025-01-20 · Red Hat rating Important
    Red Hat Trusted Profile Analyzer 1.2.2
    • Red Hat Trusted Profile Analyzer 1.2 registry.redhat.io/rhtpa/rhtpa-guac-rhel9
  • RHSA-2025:0384 Released 2025-01-16 · Red Hat rating Important
    RHSA: Submariner 0.18.4 - bug and security fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6
  • RHSA-2025:0386 Released 2025-01-16 · Red Hat rating Important
    VolSync 0.10.2 for RHEL 9
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
  • RHSA-2025:0385 Released 2025-01-16 · Red Hat rating Important
    VolSync 0.11.1 for RHEL 9
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
  • RHSA-2025:0390 Released 2025-01-16 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.4 release
    • Red Hat OpenShift distributed tracing 3.4 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8, registry.redhat.io/rhosdt/tempo-gateway-rhel8, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8 +3
  • RHSA-2025:0370 Released 2025-01-16 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.4 release
    • Red Hat OpenShift distributed tracing 3.4 registry.redhat.io/rhosdt/opentelemetry-collector-rhel8
  • RHSA-2025:0121 Released 2025-01-15 · Red Hat rating Important
    OpenShift Container Platform 4.15.43 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-cloud-credential-operator
  • RHSA-2025:0140 Released 2025-01-15 · Red Hat rating Important
    OpenShift Container Platform 4.16.30 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cloud-credential-rhel9-operator, openshift4/ose-console-rhel9, rhcos
  • RHSA-2025:0115 Released 2025-01-14 · Red Hat rating Important
    OpenShift Container Platform 4.17.12 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-cloud-credential-rhel9-operator, openshift4/ose-console-rhel9, openshift4/ose-docker-builder-rhel9
  • RHSA-2025:0224 Released 2025-01-09 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 3 on RHEL 8 cryostat-tech-preview/cryostat-db-rhel8, cryostat-tech-preview/cryostat-grafana-dashboard-rhel8, cryostat-tech-preview/cryostat-operator-bundle +6
  • RHSA-2025:0048 Released 2025-01-07 · Red Hat rating Important
    OpenShift Virtualization 4.17.3 Images
    • CNV 4.17 for RHEL 9 container-native-virtualization/kubevirt-ssp-operator-rhel9, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9 +1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Custom Metric Autoscaler operator for Red Hat OpenshiftAffectedNo fix planned: Will not fix
Fence Agents Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 7AffectedNo fix planned: Will not fix
Multiarch Tuning OperatorAffectedNo fix planned: Will not fix
Multicluster Engine for KubernetesAffectedNo fix planned: Will not fix
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix planned: Will not fix
OpenShift ServerlessAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 1.2AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 5AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 6AffectedNo fix planned: Will not fix
Red Hat Ceph Storage 7AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 9AffectedNo fix yet: Fix deferred
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Data Science (RHODS)AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Runtimes Inventory OperatorAffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Self Node Remediation OperatorAffectedNo fix yet
8Base-RHMTC-1.8Fixed RHSA-2025:8510
9Base-OADP-1.3Fixed RHSA-2025:9646
9Base-OADP-1.4Fixed RHSA-2025:11396
Builds for Red Hat OpenShift 1.1.1Fixed RHSA-2025:0715
Builds for Red Hat OpenShift 1.2.2Fixed RHSA-2025:0754
CNV 4.12 for RHEL 8Fixed RHSA-2025:16483
CNV 4.14 for RHEL 9Fixed—
CNV 4.15 for RHEL 9Fixed RHSA-2025:2658
CNV 4.16 for RHEL 9Fixed RHSA-2025:3973
CNV 4.17 for RHEL 9Fixed RHSA-2025:0048
CNV 4.18 for RHEL 9Fixed RHSA-2025:1838
Cluster Observability Operator 1.0.0Fixed RHSA-2025:1609
Cluster Observability Operator 1.5Fixed RHSA-2026:34342
Cryostat 3 on RHEL 8Fixed RHSA-2025:0224
LVMS 4.12 for RHEL 8Fixed—
LVMS 4.14 for RHEL 9Fixed—
LVMS 4.15 for RHEL 9Fixed—
LVMS 4.16 for RHEL 9Fixed—
LVMS 4.17 for RHEL 9Fixed—
LVMS 4.18 for RHEL 9Fixed—
OpenShift Windows Machine Config Operator 10.16Fixed RHSA-2025:9136
RHACS 4.4 for RHEL 8Fixed RHSA-2025:1468
RHACS 4.5 for RHEL 8Fixed RHSA-2025:1334
RHACS 4.6 for RHEL 8Fixed RHSA-2025:0907
RHODF 4.14 for RHEL 9Fixed RHSA-2025:1866, RHSA-2025:3560, RHSA-2025:8551
RHODF 4.15 for RHEL 9Fixed RHSA-2025:1865, RHSA-2025:3542, RHSA-2025:8544
RHODF 4.16 for RHEL 9Fixed RHSA-2025:0783, RHSA-2025:1829, RHSA-2025:3502, RHSA-2025:8479
RHODF 4.17 for RHEL 9Fixed RHSA-2025:0775, RHSA-2025:1824, RHSA-2025:3500, RHSA-2025:8059
RHODF 4.18 for RHEL 9Fixed RHSA-2025:2652
RHOL 5.8 for RHEL 9Fixed RHSA-2025:7451
RHOL 5.9 for RHEL 9Fixed RHSA-2025:7449
RHOL 6.0 for RHEL 9Fixed RHSA-2025:3132
RHOL 6.1 for RHEL 9Fixed RHSA-2025:3131
RHOSSM 2.4 for RHEL 8Fixed RHSA-2025:1050
RHOSSM 2.5 for RHEL 8Fixed RHSA-2025:1051
RHOSSM 2.6 for RHEL 9Fixed RHSA-2025:1053
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9Fixed RHSA-2025:0679, RHSA-2025:0821
Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9Fixed RHSA-2025:0384, RHSA-2025:0386, RHSA-2025:0785
Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed RHSA-2025:0385, RHSA-2025:0851, RHSA-2025:1013
Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8Fixed RHSA-2025:0576, RHSA-2025:0678
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2025:9340
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:11749
Red Hat Developer Hub (RHDH) 1.4Fixed—
Red Hat Developer Hub 1.5Fixed RHSA-2025:3374
Red Hat Insights for Runtimes 1.0Fixed RHSA-2025:2415
Red Hat OpenShift AI 2.16Fixed RHSA-2025:0905, RHSA-2025:3368, RHSA-2025:3397
Red Hat OpenShift AI 2.17Fixed RHSA-2025:1448
Red Hat OpenShift AI 2.18Fixed RHSA-2025:2588
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2025:0831, RHSA-2025:0832, RHSA-2025:15332, RHSA-2025:2440, RHSA-2025:2441, RHSA-2025:3573
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2025:1115, RHSA-2025:1116, RHSA-2025:15673, RHSA-2025:2700, RHSA-2025:2701
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2025:0364, RHSA-2025:0839, RHSA-2025:0840, RHSA-2025:11669, RHSA-2025:1450, RHSA-2025:1451, RHSA-2025:2710, RHSA-2025:9761
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2025:0121, RHSA-2025:0645, RHSA-2025:0646, RHSA-2025:1128, RHSA-2025:12370, RHSA-2025:1710, RHSA-2025:1711, RHSA-2025:8301
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2025:0140, RHSA-2025:0649, RHSA-2025:0650, RHSA-2025:0827, RHSA-2025:1123, RHSA-2025:1386, RHSA-2025:4007, RHSA-2025:8556
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2025:0115, RHSA-2025:0653, RHSA-2025:0654, RHSA-2025:0875, RHSA-2025:1119, RHSA-2025:1120, RHSA-2025:8280
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2024:6121, RHSA-2024:6122, RHSA-2025:13325, RHSA-2025:2449
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2024:11037, RHSA-2024:11038
Red Hat OpenShift Dev Spaces (RHOSDS) 3.23Fixed RHSA-2025:15847
Red Hat OpenShift Dev Spaces 3Fixed RHSA-2025:0892
Red Hat OpenShift GitOps 1.14Fixed RHSA-2025:3069
Red Hat OpenShift GitOps 1.16Fixed RHSA-2025:23207
Red Hat OpenShift GitOps 1.17Fixed RHSA-2025:23206
Red Hat OpenShift Pipelines 1.18.0Fixed RHSA-2025:2903, RHSA-2025:2933
Red Hat OpenShift distributed tracing 3.4Fixed RHSA-2025:0370, RHSA-2025:0390, RHSA-2025:0522
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2025:21704
Red Hat Quay 3.10Fixed RHSA-2025:22182, RHSA-2025:23064, RHSA-2026:2762
Red Hat Quay 3.12Fixed RHSA-2026:1730
Red Hat Quay 3.15Fixed RHSA-2026:6568
Red Hat Quay 3.16Fixed RHSA-2026:2681
Red Hat Quay 3.9Fixed RHSA-2025:22287, RHSA-2025:23061, RHSA-2026:2754
Red Hat Trusted Artifact Signer 1.1Fixed RHSA-2025:1289, RHSA-2025:1324, RHSA-2025:1841, RHSA-2025:1853
Red Hat Trusted Profile Analyzer 1.2Fixed RHSA-2025:0444, RHSA-2025:0445
cert-manager operator for Red Hat OpenShift 1.15Fixed RHSA-2025:0535, RHSA-2025:0536
gatekeeper 3.14 for RHEL 9Fixed RHSA-2025:1333
gatekeeper 3.15 for RHEL 9Fixed RHSA-2025:1332
gatekeeper 3.17 for RHEL 9Fixed RHSA-2025:1331
multicluster engine for Kubernetes 2.4 for RHEL 8Fixed RHSA-2025:0552
multicluster engine for Kubernetes 2.6 for RHEL 8Fixed RHSA-2025:0778
multicluster engine for Kubernetes 2.6 for RHEL 9Fixed RHSA-2025:0778
multicluster-globalhub 1.2 for RHEL 9Fixed RHSA-2025:0560
multicluster-globalhub 1.3 for RHEL 9Fixed RHSA-2025:0577
Not affected: 72 products
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.3
  • 9Base-OADP-1.4
  • Builds for Red Hat OpenShift 1.1.1
  • Builds for Red Hat OpenShift 1.2.2
  • CNV 4.15 for RHEL 9
  • CNV 4.16 for RHEL 9
  • CNV 4.17 for RHEL 9
  • CNV 4.18 for RHEL 9
  • Cluster Observability Operator 1.0.0
  • Cluster Observability Operator 1.5
  • Cryostat 4
  • Fence Agents Remediation Operator
  • Migration Toolkit for Virtualization
  • Node HealthCheck Operator
  • Node Maintenance Operator
  • OpenShift Serverless
  • OpenShift Service Mesh 2
  • OpenShift Windows Machine Config Operator 10.16
  • RHACS 4.4 for RHEL 8
  • RHACS 4.5 for RHEL 8
  • RHODF 4.14 for RHEL 9
  • RHODF 4.15 for RHEL 9
  • RHODF 4.16 for RHEL 9
  • RHODF 4.17 for RHEL 9
  • RHODF 4.18 for RHEL 9
  • RHOSSM 2.4 for RHEL 8
  • RHOSSM 2.5 for RHEL 8
  • RHOSSM 2.6 for RHEL 8
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Ceph Storage 7.1 Tools
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 8.1 Tools
  • Red Hat Connectivity Link 1
  • Red Hat Developer Hub (RHDH) 1.4
  • Red Hat Developer Hub 1
  • Red Hat Developer Hub 1.5
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.16
  • Red Hat OpenShift AI 2.17
  • Red Hat OpenShift AI 2.18
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Data Science (RHODS)
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.23
  • Red Hat OpenShift Dev Spaces 3
  • Red Hat OpenShift GitOps 1.16
  • Red Hat OpenShift GitOps 1.17
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.4
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.20
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Artifact Signer 1.1
  • Self Node Remediation Operator

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-45338
  2. 2026-10-03 Alias added: GHSA-w32m-9786-jp63
  3. 2026-10-06 Affected versions changed · Red Hat
  4. 2026-10-10 Affected versions changed · Red Hat
  5. 2026-10-10 Affected versions changed · Red Hat
  6. 2026-10-11 Affected versions changed · Red Hat
  7. 2026-10-13 Affected versions changed · Red Hat
  8. 2026-10-16 Affected versions changed · Red Hat
  9. 2026-10-27 Affected versions changed · Red Hat
  10. 2026-10-27 Affected versions changed · Red Hat
  11. 2026-10-27 Affected versions changed · Red Hat
  12. 2026-10-28 Affected versions changed · Red Hat
  13. 2026-10-29 Affected versions changed · Red Hat
  14. 2026-10-30 Fix available: LVMS 4.12 for RHEL 8, LVMS 4.18 for RHEL 9 · Red Hat
  15. 2026-10-31 Affected versions changed · Red Hat
  16. 2026-11-03 Affected versions changed · Red Hat
  17. 2026-11-03 Affected versions changed · Red Hat
  18. 2026-11-04 Affected versions changed · Red Hat
  19. 2026-11-05 Fix available: Cluster Observability Operator 1.5 · Red Hat
  20. 2026-11-05 Affected versions changed · Red Hat
  21. 2026-11-05 Affected versions changed · Red Hat

References

Advisory 1

Other 6

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences