Read the docs
TI-2025-38130 Aliases CVE-2025-61728GHSA-g9q4-qjx4-2v7q

Excessive CPU consumption when building archive index in archive/zip

Priority LOW 30CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 61 fixed, 22 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-770.

Summary

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00738 54th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial archive/zip (Go standard library): 1.24.12, 1.25.6Red Hat: 97 advisoriesRed Hat: 61 fixed, 22 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard libraryarchive/zipbefore 1.24.12; 1.25.0 to before 1.25.61.24.12, 1.25.6Patch availableCNA
  • archive/zip VendorGo standard library Affected before 1.24.12; 1.25.0 to before 1.25.6 Fixed in 1.24.12, 1.25.6 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.24.12; 1.25.0 to before 1.25.6VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.24.12; 1.25.0 to before 1.25.6 Vulnerable ·Go standard library

Remediation

  • Fix · CNA archive/zip (Go standard library) Fixed in 1.24.12, 1.25.6

Red Hat 97 advisories

  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
Show 94 more Red Hat advisories
  • RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
  • RHSA-2026:36882 Released 2026-07-08 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.3 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9 +10
  • RHSA-2026:28886 Released 2026-07-01 · Red Hat rating Important
    OpenShift Container Platform 4.14.68 packages and security update
    • Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-6.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el9 +15
  • RHSA-2026:26541 Released 2026-06-25 · Red Hat rating Important
    OpenShift Container Platform 4.13.68 packages and security update
    • Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-7.rhaos4.13.el8, podman-3:4.4.1-19.rhaos4.13.el8, podman-3:4.4.1-20.rhaos4.13.el9 +15
  • RHSA-2026:26636 Released 2026-06-17 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2026:26413 Released 2026-06-16 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.19 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
  • RHSA-2026:25127 Released 2026-06-10 · Red Hat rating Important
    Submariner v0.21 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:21691 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.67 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:23361 Released 2026-06-04 · Red Hat rating Important
    Red Hat Quay 3.9.22
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
  • RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
  • RHSA-2026:17595 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.17 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.17 podman-5:5.2.2-18.rhaos4.17.el8, podman-5:5.2.2-18.rhaos4.17.el9, podman-catatonit-5:5.2.2-18.rhaos4.17.el8 +9
  • RHSA-2026:17598 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:17446 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.18.42 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.18 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.18 podman-5:5.2.2-11.rhaos4.18.el8, podman-catatonit-5:5.2.2-11.rhaos4.18.el8, podman-docker-5:5.2.2-11.rhaos4.18.el8 +4
  • RHSA-2026:14774 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2026:17040 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.1, podman-docker-6:5.4.0-15.el10_0.1, podman-remote-6:5.4.0-15.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.1
  • RHSA-2026:15091 Released 2026-05-12 · Red Hat rating Important
    OpenShift Container Platform 4.14.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:14100 Released 2026-05-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.89 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-tests
  • RHSA-2026:12282 Released 2026-05-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.88 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:10104 Released 2026-04-30 · Red Hat rating Important
    OpenShift Container Platform 4.16.60 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:12028 Released 2026-04-30 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-20.el9_4.2, podman-docker-4:4.9.4-20.el9_4.2, podman-plugins-4:4.9.4-20.el9_4.2 +2
  • RHSA-2026:11408 Released 2026-04-28 · Red Hat rating Important
    VolSync v0.14 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:10184 Released 2026-04-23 · Red Hat rating Important
    RHOAI 2.25.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:10175 Released 2026-04-23 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.27.1 Release.
    • Red Hat OpenShift Dev Spaces 3.27 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/devspaces-rhel9-operator +8
  • RHSA-2026:8448 Released 2026-04-22 · Red Hat rating Important
    OpenShift Container Platform 4.18.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:7249 Released 2026-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.19.28 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:8229 Released 2026-04-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-cli-rhel9, registry.redhat.io/rhacm2/acm-cluster-permission-rhel9, registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9 +12
  • RHSA-2026:8151 Released 2026-04-14 · Red Hat rating Important
    Submariner v0.22 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:7854 Released 2026-04-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.2, podman-docker-5:5.4.0-20.el9_6.2, podman-plugins-5:5.4.0-20.el9_6.2 +2
  • RHSA-2026:7385 Released 2026-04-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
  • RHSA-2026:6564 Released 2026-04-09 · Red Hat rating Important
    OpenShift Container Platform 4.20.18 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12
  • RHSA-2026:6554 Released 2026-04-09 · Red Hat rating Important
    OpenShift Container Platform 4.18.37 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:6568 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.15.4
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:6567 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6497 Released 2026-04-02 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6429 Released 2026-04-02 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:6428 Released 2026-04-02 · Red Hat rating Important
    Network Observability 1.11.1 for OpenShift
    • Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +3
  • RHSA-2026:6251 Released 2026-03-31 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:6226 Released 2026-03-31 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:6192 Released 2026-03-30 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.27.0 Release.
    • Red Hat OpenShift Dev Spaces 3.27 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/configbump-rhel9, registry.redhat.io/devspaces/dashboard-rhel9 +9
  • RHSA-2026:6055 Released 2026-03-30 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.1
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9
  • RHSA-2026:5952 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.3
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5950 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.6
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5948 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.0.9
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5851 Released 2026-03-25 · Red Hat rating Important
    DevWorkspace Operator 0.40.0 release.
    • DevWorkspace Operator 0.4 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:5665 Released 2026-03-24 · Red Hat rating Important
    Red Hat Quay 3.10.19
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:5645 Released 2026-03-24 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.1
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:5549 Released 2026-03-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.4
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:5452 Released 2026-03-23 · Red Hat rating Important
    RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:5447 Released 2026-03-23 · Red Hat rating Important
    RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/fulcio-rhel9, registry.redhat.io/rhtas/rekor-backfill-redis-rhel9 +6
  • RHSA-2026:5444 Released 2026-03-23 · Red Hat rating Important
    RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/rekor-monitor-rhel9
  • RHSA-2026:5439 Released 2026-03-23 · Red Hat rating Important
    RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/createtree-rhel9
  • RHSA-2026:5110 Released 2026-03-19 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:4434 Released 2026-03-18 · Red Hat rating Important
    OpenShift Container Platform 4.19.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:4942 Released 2026-03-18 · Red Hat rating Important
    Red Hat Quay 3.12.15
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:4672 Released 2026-03-17 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.s390x::container-tools:rhel8 +47
  • RHSA-2026:4467 Released 2026-03-12 · Red Hat rating Important
    RHACS 4.9.4 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2026:4466 Released 2026-03-12 · Red Hat rating Important
    RHACS 4.8.9 security and bug fix update
    • Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2026:3851 Released 2026-03-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.16 packages and security update
    • Red Hat OpenShift Container Platform 4.20 podman-5:5.4.0-16.rhaos4.20.el9, podman-docker-5:5.4.0-16.rhaos4.20.el9, podman-plugins-5:5.4.0-16.rhaos4.20.el9 +2
  • RHSA-2026:3855 Released 2026-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.20.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:4170 Released 2026-03-10 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:3880 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-9.el8_6
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-7.5.11-9.el8_6
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-7.5.11-9.el8_6
  • RHSA-2026:3884 Released 2026-03-05 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.2 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8 +5
  • RHSA-2026:3854 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-7.5.11-13.el9_0
  • RHSA-2026:3838 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-9.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-9.el8_8
  • RHSA-2026:3836 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-10.el9_2
  • RHSA-2026:3835 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-9.2.10-25.el9_4, grafana-selinux-9.2.10-25.el9_4
  • RHSA-2026:3833 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-18.el9_6, grafana-selinux-10.2.6-18.el9_6
  • RHSA-2026:3831 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-21.el10_0, grafana-selinux-10.2.6-21.el10_0
  • RHSA-2026:3782 Released 2026-03-04 · Red Hat rating Critical
    RHOAI 2.25.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +27
  • RHSA-2026:3753 Released 2026-03-04 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-149-4.el9_7, osbuild-composer-core-149-4.el9_7, osbuild-composer-worker-149-4.el9_7
  • RHSA-2026:3752 Released 2026-03-04 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-149-5.el10_1, osbuild-composer-core-149-5.el10_1, osbuild-composer-worker-149-5.el10_1
  • RHSA-2026:3559 Released 2026-03-02 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 2.6.14
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/istio-rhel8-operator, registry.redhat.io/openshift-service-mesh/pilot-rhel8 +1
  • RHSA-2026:3556 Released 2026-03-02 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 2.6.14
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/proxyv2-rhel9
  • RHSA-2026:3489 Released 2026-03-02 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.aarch64::go-toolset:rhel8 +18
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
  • RHSA-2026:3471 Released 2026-03-02 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-4.module+el8.8.0+23976+18ba1869.ppc64le::go-toolset:rhel8 +12
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-4.module+el8.8.0+23976+18ba1869.src::go-toolset:rhel8 +9
  • RHSA-2026:3469 Released 2026-03-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) go-toolset-1.21.13-14.el9_4, golang-1.21.13-14.el9_4, golang-bin-1.21.13-14.el9_4 +4
  • RHSA-2026:3472 Released 2026-03-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) golang-1.19.13-23.el9_2, golang-bin-1.19.13-23.el9_2, golang-docs-1.19.13-23.el9_2 +4
  • RHSA-2026:3473 Released 2026-03-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) golang-1.17.13-10.el9_0, golang-bin-1.17.13-10.el9_0, golang-docs-1.17.13-10.el9_0 +4
  • RHSA-2026:3186 Released 2026-02-26 · Red Hat rating Important
    Red Hat build of Cryostat 4.1.1: new RHEL 9 container image security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-rhel9-operator, cryostat/cryostat-storage-rhel9
  • RHSA-2026:3337 Released 2026-02-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.6.0-14.el9_7, podman-docker-6:5.6.0-14.el9_7, podman-plugins-6:5.6.0-14.el9_7 +2
  • RHSA-2026:3336 Released 2026-02-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.6.0-12.el10_1, podman-docker-7:5.6.0-12.el10_1, podman-remote-7:5.6.0-12.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.6.0-12.el10_1
  • RHSA-2026:3192 Released 2026-02-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.7-1.el10_0, golang-1.25.7-1.el10_0, golang-bin-1.25.7-1.el10_0 +5
  • RHSA-2026:3193 Released 2026-02-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.7-1.el9_6, golang-1.25.7-1.el9_6, golang-bin-1.25.7-1.el9_6 +5
  • RHSA-2026:3188 Released 2026-02-24 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-28.el8_10, grafana-selinux-9.2.10-28.el8_10
  • RHSA-2026:2920 Released 2026-02-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-18.el9_7, grafana-selinux-10.2.6-18.el9_7
  • RHSA-2026:2914 Released 2026-02-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-22.el10_1, grafana-selinux-10.2.6-22.el10_1
  • RHSA-2026:2709 Released 2026-02-16 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.7-1.el9_7, golang-1.25.7-1.el9_7, golang-bin-1.25.7-1.el9_7 +5
  • RHSA-2026:2708 Released 2026-02-16 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
  • RHSA-2026:2706 Released 2026-02-16 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.7-1.el10_1, golang-1.25.7-1.el10_1, golang-bin-1.25.7-1.el10_1 +5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Deployment Validation OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix planned: Will not fix
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 6AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 7AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 8AffectedNo fix yet: Fix deferred
Red Hat Edge Manager 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Builds for Red Hat OpenShift 1.6.0Fixed RHSA-2026:5549
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:5645
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cryostat 4 on RHEL 9Fixed RHSA-2026:3186
Custom Metric Autoscaler 2.19Fixed RHSA-2026:26636
DevWorkspace Operator 0.4Fixed RHSA-2026:5851
Multicluster Global Hub 1.4.9Fixed RHSA-2026:6429
Multicluster Global Hub 1.5.8Fixed RHSA-2026:5110
Multicluster Global Hub 1.6.6Fixed RHSA-2026:6226
Network Observability (NETOBSERV) 1.11.0Fixed RHSA-2026:6428
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:6251
OpenShift API for Data Protection 1.5Fixed RHSA-2026:4170
RHEM 1.1 for RHEL 10Fixed—
RHEM 1.1 for RHEL 9Fixed—
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:8229
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:25127, RHSA-2026:36882
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:11408, RHSA-2026:8151
Red Hat Advanced Cluster Security 4.8Fixed RHSA-2026:4466
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:4467
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:22450, RHSA-2026:2706, RHSA-2026:2914, RHSA-2026:3336, RHSA-2026:3752
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:2708, RHSA-2026:3188, RHSA-2026:4672
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:22714, RHSA-2026:2709, RHSA-2026:2920, RHSA-2026:3337, RHSA-2026:3753
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:3489, RHSA-2026:3880, RHSA-2026:51288
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:3489, RHSA-2026:3880
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:3471, RHSA-2026:3838, RHSA-2026:49944
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:3473, RHSA-2026:3854
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:25248, RHSA-2026:3472, RHSA-2026:3836
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:17040, RHSA-2026:3192, RHSA-2026:3831
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:12028, RHSA-2026:3469, RHSA-2026:3835
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:3193, RHSA-2026:3833, RHSA-2026:7854
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:51288
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:3489, RHSA-2026:3880
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:3471, RHSA-2026:3838, RHSA-2026:49944
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:3336
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:17040
Red Hat Hardened ImagesFixed RHSA-2026:7291, RHSA-2026:7385
Red Hat OpenShift AI 2.25Fixed RHSA-2026:10184, RHSA-2026:3782
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:6055
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:12282, RHSA-2026:14100
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:21691, RHSA-2026:26541
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:15091, RHSA-2026:28886
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14774
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:10104
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17595, RHSA-2026:17598
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:17446, RHSA-2026:6554, RHSA-2026:8448
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:4434, RHSA-2026:7249
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:3851, RHSA-2026:3855, RHSA-2026:6564
Red Hat OpenShift Dev Spaces 3.27Fixed RHSA-2026:10175, RHSA-2026:6192
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:3884
Red Hat OpenShift Service Mesh 2.6Fixed RHSA-2026:3556, RHSA-2026:3559
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:5948
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:5950
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:5952
Red Hat Openshift Data Foundation 4.19Fixed RHSA-2026:26413
Red Hat Quay 3.10Fixed RHSA-2026:5665
Red Hat Quay 3.12Fixed RHSA-2026:4942
Red Hat Quay 3.15Fixed RHSA-2026:6568
Red Hat Quay 3.16Fixed RHSA-2026:6497, RHSA-2026:6567
Red Hat Quay 3.9Fixed RHSA-2026:23361
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:5439, RHSA-2026:5444, RHSA-2026:5447, RHSA-2026:5452
Not affected: 52 products
  • Builds for Red Hat OpenShift 1.6.0
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler 2.19
  • DevWorkspace Operator 0.4
  • External Secrets Operator for Red Hat OpenShift
  • Ironic content for Red Hat OpenShift Container Platform 4.17
  • Ironic content for Red Hat OpenShift Container Platform 4.18
  • Migration Toolkit for Applications 8
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability (NETOBSERV) 1.11.0
  • Node Maintenance Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Security 4.8
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Dev Spaces 3.27
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift Service Mesh 2.6
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.19
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Trusted Artifact Signer 1.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-61728
  2. 2026-10-03 Alias added: GHSA-g9q4-qjx4-2v7q
  3. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  4. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  5. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  6. 2026-10-15 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat

References

Exploit 1

Patch 2

Advisory 1

Other 1

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences