Read the docs
TI-2025-35990 Aliases CVE-2025-58183GHSA-9gcr-gp5f-jw27

Unbounded allocation when parsing GNU sparse map in archive/tar

Priority LOW 20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Partial Red Hat: 67 fixed, 34 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00443 38th percentileScored 2026-11-07
Fix Partial archive/tar (Go standard library): 1.24.8, 1.25.2Red Hat: 144 advisoriesRed Hat: 67 fixed, 34 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard libraryarchive/tarbefore 1.24.8; 1.25.0 to before 1.25.21.24.8, 1.25.2Patch availableCNA
  • archive/tar VendorGo standard library Affected before 1.24.8; 1.25.0 to before 1.25.2 Fixed in 1.24.8, 1.25.2 Patch available CNA

Remediation

  • Fix · CNA archive/tar (Go standard library) Fixed in 1.24.8, 1.25.2

Red Hat 144 advisories

  • RHSA-2026:83622 Released 2026-10-15 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.17 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:56347 Released 2026-08-18 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-analyzer-addon-rhel9, registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-discovery-addon-rhel9 +4
  • RHSA-2026:47388 Released 2026-07-28 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
Show 141 more Red Hat advisories
  • RHSA-2026:46885 Released 2026-07-27 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:41941 Released 2026-07-20 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:30650 Released 2026-06-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.8 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:26541 Released 2026-06-25 · Red Hat rating Important
    OpenShift Container Platform 4.13.68 packages and security update
    • Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-7.rhaos4.13.el8, podman-3:4.4.1-19.rhaos4.13.el8, podman-3:4.4.1-20.rhaos4.13.el9 +15
  • RHSA-2026:26527 Released 2026-06-25 · Red Hat rating Important
    OpenShift Container Platform 4.12.92 packages and security update
    • Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-6.rhaos4.12.el8, skopeo-2:1.9.4-8.rhaos4.12.el8, skopeo-2:1.9.4-9.rhaos4.12.el9 +2
  • RHSA-2026:26420 Released 2026-06-16 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:21701 Released 2026-06-03 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.24 packages and security update
    • Red Hat OpenShift Container Platform 4.20 cri-o-1.33.12-3.rhaos4.20.git64c6a00.el9, kernel-5.14.0-570.117.1.el9_6, kernel-64k-5.14.0-570.117.1.el9_6 +47
  • RHSA-2026:21658 Released 2026-06-03 · Red Hat rating Important
    OpenShift Container Platform 4.18.43 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator +5
  • RHSA-2026:21704 Released 2026-06-03 · Red Hat rating Important
    OpenShift Container Platform 4.20.24 security and extras update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator, registry.redhat.io/openshift4/ose-dpu-cni-rhel9 +3
  • RHSA-2026:20089 Released 2026-05-29 · Red Hat rating Important
    OpenShift Container Platform 4.16.63 security and extras update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-dpu-cni-rhel9, registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9 +3
  • RHSA-2026:20042 Released 2026-05-27 · Red Hat rating Important
    OpenShift Container Platform 4.19.32 security and extras update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-dpu-cni-rhel9 +5
  • RHSA-2026:20034 Released 2026-05-26 · Red Hat rating Important
    OpenShift Container Platform 4.21.17 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9, registry.redhat.io/openshift4/ose-cluster-api-rhel9 +15
  • RHSA-2026:17595 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.17 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.17 podman-5:5.2.2-18.rhaos4.17.el8, podman-5:5.2.2-18.rhaos4.17.el9, podman-catatonit-5:5.2.2-18.rhaos4.17.el8 +9
  • RHSA-2026:17446 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.18.42 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.18 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.18 podman-5:5.2.2-11.rhaos4.18.el8, podman-catatonit-5:5.2.2-11.rhaos4.18.el8, podman-docker-5:5.2.2-11.rhaos4.18.el8 +4
  • RHSA-2026:13548 Released 2026-05-04 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.2 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9 +8
  • RHSA-2026:13542 Released 2026-05-04 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.2 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +1
  • RHSA-2026:12279 Released 2026-04-30 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:10703 Released 2026-04-27 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
  • RHSA-2026:8325 Released 2026-04-15 · Red Hat rating Important
    buildah, crun, podman, runc, and skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.9-1.el9_0.3, buildah-tests-1:1.26.9-1.el9_0.3, podman-2:4.2.0-6.el9_0.6 +9
  • RHSA-2026:8229 Released 2026-04-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +12
  • RHSA-2026:8218 Released 2026-04-15 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.5 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +5
  • RHSA-2026:7385 Released 2026-04-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
  • RHSA-2026:6564 Released 2026-04-09 · Red Hat rating Important
    OpenShift Container Platform 4.20.18 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12
  • RHSA-2026:6554 Released 2026-04-09 · Red Hat rating Important
    OpenShift Container Platform 4.18.37 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:5876 Released 2026-04-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.27 packages and security update
    • Red Hat OpenShift Container Platform 4.19 runc-4:1.2.5-5.rhaos4.19.el9, skopeo-2:1.18.1-5.rhaos4.19.el9, skopeo-tests-2:1.18.1-5.rhaos4.19.el9
  • RHSA-2026:5866 Released 2026-04-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.52 packages and security update
    • Red Hat OpenShift Container Platform 4.17 containernetworking-plugins-1:1.4.0-8.rhaos4.17.el8, runc-4:1.2.9-4.rhaos4.17.el8, runc-4:1.2.9-4.rhaos4.17.el9 +4
  • RHSA-2026:6226 Released 2026-03-31 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:6191 Released 2026-03-30 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:5086 Released 2026-03-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.63 packages and security update
    • Red Hat OpenShift Container Platform 4.14 podman-3:4.4.1-24.rhaos4.14.el8, podman-3:4.4.1-24.rhaos4.14.el9, podman-catatonit-3:4.4.1-24.rhaos4.14.el8 +14
  • RHSA-2026:5107 Released 2026-03-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:5645 Released 2026-03-24 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.1
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:5636 Released 2026-03-24 · Red Hat rating Important
    multicluster engine for Kubernetes v2.7.9 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:5633 Released 2026-03-24 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.12.8 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9 +23
  • RHSA-2026:5394 Released 2026-03-23 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-agent, registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:5234 Released 2026-03-23 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.2-0.1.el9_2.4, skopeo-tests-2:1.11.2-0.1.el9_2.4
  • RHSA-2026:4464 Released 2026-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.16.58 packages and security update
    • Red Hat OpenShift Container Platform 4.16 containernetworking-plugins-1:1.4.0-7.rhaos4.16.el8, runc-4:1.2.9-2.rhaos4.16.el8, runc-4:1.2.9-2.rhaos4.16.el9 +4
  • RHSA-2026:4482 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:4418 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.62 packages and security update
    • Red Hat OpenShift Container Platform 4.15 cri-o-1.28.11-13.rhaos4.15.gitf722b2f.el9, openshift-4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el8, openshift-4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el9 +19
  • RHSA-2026:4423 Released 2026-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.15.62 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2026:4510 Released 2026-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.17.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:4434 Released 2026-03-18 · Red Hat rating Important
    OpenShift Container Platform 4.19.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:4936 Released 2026-03-18 · Red Hat rating Important
    Release of containers for RHOSO 18.0.17 security update
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +22
  • RHSA-2026:4693 Released 2026-03-17 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:4533 Released 2026-03-12 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.5, podman-docker-2:4.4.1-22.el9_2.5, podman-gvproxy-2:4.4.1-22.el9_2.5 +3
  • RHSA-2026:4532 Released 2026-03-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.5-1.el9_2.2, buildah-tests-1:1.29.5-1.el9_2.2
  • RHSA-2026:3875 Released 2026-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.35 packages and security update
    • Red Hat OpenShift Container Platform 4.18 containernetworking-plugins-1:1.4.0-7.rhaos4.18.el8, runc-4:1.2.9-4.rhaos4.18.el8, skopeo-2:1.16.1-3.rhaos4.18.el8 +1
  • RHSA-2026:3905 Released 2026-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.35 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:4215 Released 2026-03-10 · Red Hat rating Important
    Red Hat Quay 3.14.6
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:3108 Released 2026-02-23 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.5
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-rhel9-operator
  • RHSA-2026:2900 Released 2026-02-18 · Red Hat rating Important
    Network Observability 1.11.0 for OpenShift
    • Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +2
  • RHSA-2026:2737 Released 2026-02-16 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 8 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-8-rhel9
  • RHSA-2026:2711 Released 2026-02-16 · Red Hat rating Important
    Red Hat Ceph Storage 8.1 security and bug fix update
    • Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-331.el9cp, ceph-base-2:19.2.1-331.el9cp, ceph-common-2:19.2.1-331.el9cp +31
  • RHSA-2026:2572 Released 2026-02-11 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.2 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/config-policy-controller-rhel9 +16
  • RHSA-2026:2571 Released 2026-02-11 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.2 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +8
  • RHSA-2026:2568 Released 2026-02-11 · Red Hat rating Important
    RHACS 4.9.3 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +6
  • RHSA-2026:2071 Released 2026-02-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.33 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-o-1.31.13-6.rhaos4.18.git7ed6156.el8, cri-o-1.31.13-6.rhaos4.18.git7ed6156.el9
  • RHSA-2026:2456 Released 2026-02-10 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.26.0 Release.
    • Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/configbump-rhel9, registry.redhat.io/devspaces/dashboard-rhel9 +9
  • RHSA-2026:2082 Released 2026-02-10 · Red Hat rating Moderate
    OpenShift Container Platform 4.21.1 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-o-1.34.5-2.rhaos4.21.gita8af6ea.el9
  • RHSA-2026:2129 Released 2026-02-10 · Red Hat rating Important
    OpenShift Container Platform 4.21.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-ironic-rhel9 +2
  • RHSA-2026:2351 Released 2026-02-09 · Red Hat rating Moderate
    VolSync v0.13 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:2350 Released 2026-02-09 · Red Hat rating Important
    RHACS 4.9.3 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +6
  • RHSA-2026:2343 Released 2026-02-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:1837 Released 2026-02-05 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-149-4.el10_1, osbuild-composer-core-149-4.el10_1, osbuild-composer-worker-149-4.el10_1
  • RHSA-2026:1838 Released 2026-02-05 · Red Hat rating Moderate
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-31-3.el10_1
  • RHSA-2026:1942 Released 2026-02-04 · Red Hat rating Important
    Red Hat Quay 3.15.3
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:1552 Released 2026-02-04 · Red Hat rating Important
    OpenShift Container Platform 4.19.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-baremetal-installer-rhel9, registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-rhel9, registry.redhat.io/openshift4/ose-hypershift-rhel9 +3
  • RHSA-2026:1520 Released 2026-01-29 · Red Hat rating Moderate
    Red Hat multicluster global hub 1.6.1 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
  • RHSA-2026:1517 Released 2026-01-28 · Red Hat rating Important
    RHACS 4.8.8 security and bug fix update
    • Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2026:1488 Released 2026-01-28 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.1 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/dex-rhel8, registry.redhat.io/openshift-gitops-1/gitops-rhel8
  • RHSA-2026:1377 Released 2026-01-27 · Red Hat rating Moderate
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-31-2.el9_7
  • RHSA-2026:1381 Released 2026-01-27 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-149-3.el9_7, osbuild-composer-core-149-3.el9_7, osbuild-composer-worker-149-3.el9_7
  • RHSA-2026:1379 Released 2026-01-27 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-4.el9_6, osbuild-composer-core-132.2-4.el9_6, osbuild-composer-worker-132.2-4.el9_6
  • RHSA-2026:1380 Released 2026-01-27 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.4-2.el8_10, osbuild-composer-core-101.4-2.el8_10, osbuild-composer-worker-101.4-2.el8_10
  • RHSA-2026:1378 Released 2026-01-27 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-4.el10_0, osbuild-composer-core-134.1-4.el10_0, osbuild-composer-worker-134.1-4.el10_0
  • RHSA-2026:1072 Released 2026-01-25 · Red Hat rating Moderate
    Red Hat Advanced Cluster Management for Kubernetes v2.15.1 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +3
  • RHSA-2026:1071 Released 2026-01-25 · Red Hat rating Moderate
    multicluster engine for Kubernetes v2.10.1 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9 +3
  • RHSA-2026:1067 Released 2026-01-23 · Red Hat rating Moderate
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.1
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9
  • RHSA-2026:1025 Released 2026-01-22 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-4.el8_6, osbuild-composer-core-46.3-4.el8_6, osbuild-composer-dnf-json-46.3-4.el8_6 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) osbuild-composer-46.3-4.el8_6, osbuild-composer-core-46.3-4.el8_6, osbuild-composer-dnf-json-46.3-4.el8_6 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) osbuild-composer-46.3-4.el8_6, osbuild-composer-core-46.3-4.el8_6, osbuild-composer-dnf-json-46.3-4.el8_6 +1
  • RHSA-2026:1018 Released 2026-01-22 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.17.4 security update
    • Red Hat OpenShift GitOps 1.17 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
  • RHSA-2026:1017 Released 2026-01-22 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.18.3 security update
    • Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +4
  • RHSA-2026:0987 Released 2026-01-22 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) osbuild-composer-28.7-4.el8_4, osbuild-composer-core-28.7-4.el8_4, osbuild-composer-worker-28.7-4.el8_4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) osbuild-composer-28.7-4.el8_4, osbuild-composer-core-28.7-4.el8_4, osbuild-composer-worker-28.7-4.el8_4
  • RHSA-2026:0973 Released 2026-01-22 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-5.el8_8, osbuild-composer-core-75-5.el8_8, osbuild-composer-dnf-json-75-5.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-5.el8_8, osbuild-composer-core-75-5.el8_8, osbuild-composer-dnf-json-75-5.el8_8 +1
  • RHSA-2026:0663 Released 2026-01-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.11 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:0722 Released 2026-01-15 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.4 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9 +14
  • RHSA-2026:0718 Released 2026-01-15 · Red Hat rating Important
    Moderate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +24
  • RHSA-2026:0671 Released 2026-01-15 · Red Hat rating Moderate
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.4
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9
  • RHSA-2026:0627 Released 2026-01-14 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +19
  • RHSA-2026:0530 Released 2026-01-13 · Red Hat rating Moderate
    Red Hat OpenShift Service Mesh 2.6.12
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/pilot-rhel8
  • RHSA-2026:0527 Released 2026-01-13 · Red Hat rating Important
    VolSync v0.14 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:0477 Released 2026-01-12 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) skopeo-2:1.14.5-2.el9_4.3, skopeo-tests-2:1.14.5-2.el9_4.3
  • RHSA-2026:0426 Released 2026-01-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) buildah-2:1.33.13-2.el9_4.1, buildah-tests-2:1.33.13-2.el9_4.1
  • RHSA-2026:0424 Released 2026-01-12 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-19.el9_4.5, podman-docker-4:4.9.4-19.el9_4.5, podman-plugins-4:4.9.4-19.el9_4.5 +2
  • RHSA-2026:0312 Released 2026-01-08 · Red Hat rating Moderate
    cups security update
    • Red Hat Enterprise Linux AppStream (v. 9) cups-1:2.3.3op2-34.el9_7.2, cups-client-1:2.3.3op2-34.el9_7.2, cups-devel-1:2.3.3op2-34.el9_7.2 +4
    • Red Hat Enterprise Linux BaseOS (v. 9) cups-1:2.3.3op2-34.el9_7.2, cups-libs-1:2.3.3op2-34.el9_7.2
  • RHSA-2026:0314 Released 2026-01-08 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-3.el9_2, osbuild-composer-core-76.1-3.el9_2, osbuild-composer-dnf-json-76.1-3.el9_2 +1
  • RHSA-2026:0246 Released 2026-01-07 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-8.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-7.5.11-8.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-7.5.11-8.el8_6
  • RHSA-2026:0245 Released 2026-01-07 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-8.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-8.el8_8
  • RHSA-2026:0243 Released 2026-01-07 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-11.el8_4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) grafana-7.3.6-11.el8_4
  • RHSA-2026:0244 Released 2026-01-07 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) grafana-6.3.6-9.el8_2, grafana-azure-monitor-6.3.6-9.el8_2, grafana-cloudwatch-6.3.6-9.el8_2 +10
  • RHSA-2026:0226 Released 2026-01-07 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) osbuild-composer-101.3-3.el9_4, osbuild-composer-core-101.3-3.el9_4, osbuild-composer-worker-101.3-3.el9_4
  • RHSA-2026:0227 Released 2026-01-07 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) osbuild-composer-46.3-5.el9_0, osbuild-composer-core-46.3-5.el9_0, osbuild-composer-dnf-json-46.3-5.el9_0 +1
  • RHSA-2025:23948 Released 2025-12-22 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-26.el8_10, grafana-selinux-9.2.10-26.el8_10
  • RHSA-2025:23737 Released 2025-12-22 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+23822+add30b82.ppc64le::go-toolset:rhel8 +12
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-3.module+el8.8.0+23822+add30b82.src::go-toolset:rhel8 +9
  • RHSA-2025:23746 Released 2025-12-22 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-9.2.10-24.el9_4, grafana-selinux-9.2.10-24.el9_4
  • RHSA-2025:23747 Released 2025-12-22 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-9.el9_2
  • RHSA-2025:23733 Released 2025-12-22 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.aarch64::go-toolset:rhel8 +18
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
  • RHSA-2025:23741 Released 2025-12-22 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src::go-toolset:rhel8, delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64::go-toolset:rhel8, go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src::go-toolset:rhel8 +9
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src::go-toolset:rhel8, delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64::go-toolset:rhel8, go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src::go-toolset:rhel8 +9
  • RHSA-2025:23736 Released 2025-12-22 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-7.5.11-12.el9_0
  • RHSA-2025:23740 Released 2025-12-22 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) delve-1.3.2-3.module+el8.2.0+5581+896cb53e.src::go-toolset:rhel8, delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64::go-toolset:rhel8, go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.src::go-toolset:rhel8 +9
  • RHSA-2025:23325 Released 2025-12-18 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.6.0-9.el9_7, podman-docker-6:5.6.0-9.el9_7, podman-plugins-6:5.6.0-9.el9_7 +2
  • RHSA-2025:23326 Released 2025-12-18 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.20.0-2.el9_7, skopeo-tests-2:1.20.0-2.el9_7
  • RHSA-2025:23394 Released 2025-12-18 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-3.el9_6, skopeo-tests-2:1.18.1-3.el9_6
  • RHSA-2025:23374 Released 2025-12-18 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+23772+e5018371.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23772+e5018371.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23772+e5018371.s390x::container-tools:rhel8 +47
  • RHSA-2025:23295 Released 2025-12-18 · Red Hat rating Moderate
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.6.0-8.el10_1, podman-docker-7:5.6.0-8.el10_1, podman-remote-7:5.6.0-8.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.6.0-8.el10_1
  • RHSA-2025:23294 Released 2025-12-18 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.20.0-2.el10_1, skopeo-tests-2:1.20.0-2.el10_1
  • RHSA-2025:23347 Released 2025-12-18 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-14.el10_0, podman-docker-6:5.4.0-14.el10_0, podman-remote-6:5.4.0-14.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-14.el10_0
  • RHSA-2025:23348 Released 2025-12-18 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0, skopeo-tests-2:1.18.1-3.el10_0
  • RHSA-2025:23546 Released 2025-12-17 · Red Hat rating Important
    Red Hat Quay 3.16.0
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-builder-rhel9, registry.redhat.io/quay/quay-container-security-operator-rhel9, registry.redhat.io/quay/quay-rhel9
  • RHSA-2025:23421 Released 2025-12-16 · Red Hat rating Moderate
    Red Hat OpenShift distributed tracing platform (Tempo) 3.8.1 release
    • Red Hat OpenShift distributed tracing 3.8.0 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8, registry.redhat.io/rhosdt/tempo-gateway-rhel8, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8 +4
  • RHSA-2025:23087 Released 2025-12-11 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-17.el9_7, grafana-selinux-10.2.6-17.el9_7
  • RHSA-2025:23088 Released 2025-12-11 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-21.el10_1, grafana-selinux-10.2.6-21.el10_1
  • RHSA-2025:23002 Released 2025-12-10 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-16.el9_6, grafana-selinux-10.2.6-16.el9_6
  • RHSA-2025:23001 Released 2025-12-10 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-19.el10_0, grafana-selinux-10.2.6-19.el10_0
  • RHSA-2025:22899 Released 2025-12-09 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) golang-1.17.13-8.el9_0, golang-bin-1.17.13-8.el9_0, golang-docs-1.17.13-8.el9_0 +4
  • RHSA-2025:22759 Released 2025-12-04 · Red Hat rating Important
    RHOAI 2.22.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.22 registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +8
  • RHSA-2025:22743 Released 2025-12-04 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.1
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +3
  • RHSA-2025:22738 Released 2025-12-04 · Red Hat rating Moderate
    Red Hat OpenShift Builds 1.5.2
    • Builds for Red Hat OpenShift 1.5.2 registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9
  • RHSA-2025:22668 Released 2025-12-03 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
  • RHSA-2025:22255 Released 2025-12-02 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.6 packages and security update
    • Red Hat OpenShift Container Platform 4.20 cri-o-1.33.6-2.rhaos4.20.git6d65309.el9
  • RHSA-2025:22345 Released 2025-11-27 · Red Hat rating Moderate
    Red Hat OpenShift Developer Tools - Source-to-Image 1.5.2
    • Source-to-Image (S2I) 1.5.0 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2025:22181 Released 2025-11-26 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) golang-1.19.13-20.el9_2, golang-bin-1.19.13-20.el9_2, golang-docs-1.19.13-20.el9_2 +4
  • RHSA-2025:22030 Released 2025-11-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-15.el9_6, podman-docker-5:5.4.0-15.el9_6, podman-plugins-5:5.4.0-15.el9_6 +2
  • RHSA-2025:22011 Released 2025-11-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.41.6-1.el9_7, buildah-tests-2:1.41.6-1.el9_7
  • RHSA-2025:22012 Released 2025-11-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.41.6-1.el10_1, buildah-tests-2:1.41.6-1.el10_1
  • RHSA-2025:21964 Released 2025-11-24 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.6-1.el9_6, buildah-tests-2:1.39.6-1.el9_6
  • RHSA-2025:21856 Released 2025-11-20 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) go-toolset-1.21.13-12.el9_4, golang-1.21.13-12.el9_4, golang-bin-1.21.13-12.el9_4 +4
  • RHSA-2025:21815 Released 2025-11-20 · Red Hat rating Moderate
    delve and golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) delve-1.25.2-1.el9_7, go-toolset-1.25.3-1.el9_7, golang-1.25.3-1.el9_7 +6
  • RHSA-2025:21816 Released 2025-11-20 · Red Hat rating Moderate
    delve and golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.25.2-1.el10_1, go-toolset-1.25.3-1.el10_1, golang-1.25.3-1.el10_1 +6
  • RHSA-2025:21778 Released 2025-11-20 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) delve-1.25.2-1.el9_6, go-toolset-1.25.3-1.el9_6, golang-1.25.3-1.el9_6 +6
  • RHSA-2025:21779 Released 2025-11-20 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-1.el10_0, go-toolset-1.25.3-1.el10_0, golang-1.25.3-1.el10_0 +6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Deployment Validation OperatorAffectedNo fix yet
Gatekeeper 3AffectedNo fix yet
Migration Toolkit for Applications 7AffectedNo fix yet
Migration Toolkit for VirtualizationAffectedNo fix planned: Will not fix
Multicluster Engine for KubernetesAffectedNo fix yet
OpenShift API for Data ProtectionAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix planned: Will not fix
OpenShift ServerlessAffectedNo fix planned: Will not fix
OpenShift Service Mesh 2AffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix yet
Red Hat Ceph Storage 8AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix planned: Out of support scope
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AI (RHEL AI)AffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
external secrets operator for Red Hat OpenShift - Tech PreviewAffectedNo fix planned: Will not fix
Builds for Red Hat OpenShift 1.5.2Fixed RHSA-2025:22738
Builds for Red Hat OpenShift 1.6.0Fixed RHSA-2025:22743
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:5645
Multicluster Global Hub 1.6.6Fixed RHSA-2026:1520, RHSA-2026:6226
Network Observability (NETOBSERV) 1.11.0Fixed RHSA-2026:2900
OpenShift API for Data Protection 1.5Fixed RHSA-2026:2343
Red Hat Advanced Cluster Management for Kubernetes 2.12Fixed RHSA-2026:5633
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:0627, RHSA-2026:0718, RHSA-2026:8229
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:2351, RHSA-2026:2572
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:0527, RHSA-2026:1072, RHSA-2026:13548
Red Hat Advanced Cluster Security 4.8Fixed RHSA-2026:1517
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:2350, RHSA-2026:2568
Red Hat Ceph Storage 8Fixed RHSA-2026:2737
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2026:2711
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:21816, RHSA-2025:22012, RHSA-2025:23088, RHSA-2025:23294, RHSA-2025:23295, RHSA-2026:1837, RHSA-2026:1838
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:22668, RHSA-2025:23374, RHSA-2025:23948, RHSA-2026:1380
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:21815, RHSA-2025:22011, RHSA-2025:23087, RHSA-2025:23325, RHSA-2025:23326, RHSA-2026:0312, RHSA-2026:1377, RHSA-2026:1381
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:23740, RHSA-2026:0244
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:23741, RHSA-2026:0243, RHSA-2026:0987
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:23733, RHSA-2026:0246, RHSA-2026:1025, RHSA-2026:10703
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:23733, RHSA-2026:0246, RHSA-2026:1025, RHSA-2026:10703
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:23737, RHSA-2026:0245, RHSA-2026:0973, RHSA-2026:4693, RHSA-2026:6191
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:22899, RHSA-2025:23736, RHSA-2026:0227, RHSA-2026:8325
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:22181, RHSA-2025:23747, RHSA-2026:0314, RHSA-2026:4532, RHSA-2026:4533, RHSA-2026:5234
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2025:21779, RHSA-2025:23001, RHSA-2025:23347, RHSA-2025:23348, RHSA-2026:1378
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:21856, RHSA-2025:23746, RHSA-2026:0226, RHSA-2026:0424, RHSA-2026:0426, RHSA-2026:0477
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2025:21778, RHSA-2025:21964, RHSA-2025:22030, RHSA-2025:23002, RHSA-2025:23394, RHSA-2026:1379
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2025:23741, RHSA-2026:0243, RHSA-2026:0987
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:23733, RHSA-2026:0246, RHSA-2026:1025, RHSA-2026:10703
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:23737, RHSA-2026:0245, RHSA-2026:0973, RHSA-2026:4693, RHSA-2026:6191
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:0312
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:23295
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2025:23347
Red Hat Hardened ImagesFixed RHSA-2026:7291, RHSA-2026:7385
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat Migration Toolkit for Applications 8.2Fixed RHSA-2026:56347
Red Hat OpenShift AI 2.22Fixed RHSA-2025:22759
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:26527
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:26541
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:5086, RHSA-2026:5107
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:4418, RHSA-2026:4423
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:20089, RHSA-2026:4464, RHSA-2026:4482
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17595, RHSA-2026:4510, RHSA-2026:5866
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:17446, RHSA-2026:2071, RHSA-2026:21658, RHSA-2026:3875, RHSA-2026:3905, RHSA-2026:6554
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:1552, RHSA-2026:20042, RHSA-2026:4434, RHSA-2026:5876
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2025:22255, RHSA-2026:0663, RHSA-2026:21701, RHSA-2026:21704, RHSA-2026:6564
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:20034, RHSA-2026:2082, RHSA-2026:2129
Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed RHSA-2026:2456
Red Hat OpenShift GitOps 1.17Fixed RHSA-2026:1018
Red Hat OpenShift GitOps 1.18Fixed RHSA-2026:1017
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:1488
Red Hat OpenShift Service Mesh 2.6Fixed RHSA-2026:0530
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:3108
Red Hat OpenShift distributed tracing 3.8.0Fixed RHSA-2025:23421
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:5394
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:4936
Red Hat Openshift Data Foundation 4.17Fixed RHSA-2026:83622
Red Hat Openshift Data Foundation 4.18Fixed RHSA-2026:26420, RHSA-2026:41941
Red Hat Openshift Data Foundation 4.19Fixed RHSA-2026:12279
Red Hat Quay 3.14Fixed RHSA-2026:4215
Red Hat Quay 3.15Fixed RHSA-2026:1942
Red Hat Quay 3.16Fixed RHSA-2025:23546
Source-to-Image (S2I) 1.5.0Fixed RHSA-2025:22345
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:1067, RHSA-2026:1071, RHSA-2026:13542, RHSA-2026:46885
multicluster engine for Kubernetes 2.7Fixed RHSA-2026:5636
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:0671, RHSA-2026:0722, RHSA-2026:30650, RHSA-2026:8218
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:2571
Not affected: 58 products
  • Builds for Red Hat OpenShift 1.5.2
  • Builds for Red Hat OpenShift 1.6.0
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • Ironic content for Red Hat OpenShift Container Platform 4.17
  • Ironic content for Red Hat OpenShift Container Platform 4.18
  • Logging Subsystem for Red Hat OpenShift
  • Migration Toolkit for Applications 8
  • Multicluster Global Hub 1.6.6
  • Network Observability (NETOBSERV) 1.11.0
  • OpenShift API for Data Protection 1.5
  • OpenShift Service Mesh 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.12
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Security 4.8
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 8.1 Tools
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream E4S (v.9.0)
  • Red Hat Migration Toolkit 1.8
  • Red Hat Migration Toolkit for Applications 8.2
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.22
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.26
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift GitOps 1.17
  • Red Hat OpenShift GitOps 1.18
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift Service Mesh 2.6
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Openshift Data Foundation 4.17
  • Red Hat Openshift Data Foundation 4.18
  • Red Hat Openshift Data Foundation 4.19
  • Red Hat Quay 3.14
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Application Pipeline
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.7
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-58183
  2. 2026-10-03 Alias added: GHSA-9gcr-gp5f-jw27
  3. 2026-10-09 Affected versions changed · Red Hat
  4. 2026-10-15 Fix available: Cert Manager support for Red Hat OpenShift release 1.17 · Red Hat
  5. 2026-10-16 Fix available: RHSA-2026:83622 · Red Hat
  6. 2026-10-16 Fix available: Red Hat Openshift Data Foundation 4.17 · Red Hat
  7. 2026-10-27 Affected versions changed · Red Hat
  8. 2026-10-31 Fix available: RHSA-2026:1552 · Red Hat

References

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences