Read the docs
TI-2025-41709 Aliases CVE-2025-68121GHSA-h355-32pf-p2xm

Unexpected session resumption in crypto/tls

Priority MEDIUM 51CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 108 fixed, 52 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00902 59th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial crypto/tls (Go standard library): 1.24.13, 1.25.7, 1.26.0-rc.3Red Hat: 242 advisoriesRed Hat: 108 fixed, 52 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/tlsbefore 1.24.13; 1.25.0-0 to before 1.25.7; 1.26.0-rc.1 to before 1.26.0-rc.31.24.13, 1.25.7, 1.26.0-rc.3Patch availableCNA
  • crypto/tls VendorGo standard library Affected before 1.24.13; 1.25.0-0 to before 1.25.7; 1.26.0-rc.1 to before 1.26.0-rc.3 Fixed in 1.24.13, 1.25.7, 1.26.0-rc.3 Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.24.13; 1.25.0 to before 1.25.7VulnerableGo standard library
cpe:2.3:a:golang:go:1.26.0:rc1:*:*:*:*:*:*1.26.0 rc1VulnerableGo standard library
cpe:2.3:a:golang:go:1.26.0:rc2:*:*:*:*:*:*1.26.0 rc2VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.24.13; 1.25.0 to before 1.25.7 Vulnerable ·Go standard library
  • cpe:2.3:a:golang:go:1.26.0:rc1:*:*:*:*:*:* Versions 1.26.0 rc1 Vulnerable ·Go standard library
  • cpe:2.3:a:golang:go:1.26.0:rc2:*:*:*:*:*:* Versions 1.26.0 rc2 Vulnerable ·Go standard library

Remediation

  • Fix · CNA crypto/tls (Go standard library) Fixed in 1.24.13, 1.25.7, 1.26.0-rc.3

Red Hat 242 advisories

  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
  • RHSA-2026:93598 Released 2026-11-02 · Red Hat rating Important
    LVMS 4.17 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.17 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
Show 239 more Red Hat advisories
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:88199 Released 2026-10-22 · Red Hat rating Important
    LVMS 4.12 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.12 registry.redhat.io/lvms4/lvms-rhel8-operator
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
  • RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
  • RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:65838 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 packages and security update
    • Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-8.rhaos4.13.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el9 +14
  • RHSA-2026:65840 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:65841 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 security and extras update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-ansible-operator, registry.redhat.io/openshift4/ose-cluster-capacity, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
  • RHSA-2026:66401 Released 2026-09-10 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security and bug fix advisory
    • Red Hat OpenStack Platform 17.1 ansible-collection-ansible-posix-1.2.0-1.4.el9ost, ansible-collections-openstack-1.9.1-17.1.20260318160829.0e9a6f2.el9ost, collectd-sensubility-0.2.1-6.el9ost +47
  • RHSA-2026:59830 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.97 packages and security update
    • Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-7.rhaos4.12.el8, cri-o-1.25.5-34.rhaos4.12.git6120b13.el8, cri-tools-1.25.0-6.el9 +13
  • RHSA-2026:59833 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.97 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:59834 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.97 security and extras update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-ansible-operator
  • RHSA-2026:60018 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 packages and security update
    • Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el8, cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el9, cri-tools-1.30.0-9.el8 +25
  • RHSA-2026:56910 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.68 packages and security update
    • Red Hat OpenShift Container Platform 4.15 butane-0.20.0-6.rhaos4.15.el8, butane-redistributable-0.20.0-6.rhaos4.15.el8, containernetworking-plugins-1:1.4.0-7.rhaos4.15.el8 +18
  • RHSA-2026:56852 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.16.69 packages and security update
    • Red Hat OpenShift Container Platform 4.16 butane-0.21.0-6.rhaos4.16.el8, butane-redistributable-0.21.0-6.rhaos4.16.el8, containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8 +34
  • RHSA-2026:56912 Released 2026-08-26 · Red Hat rating Critical
    OpenShift Container Platform 4.15.68 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-console +5
  • RHSA-2026:56854 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.16.69 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:56855 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.16.69 security and extras update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:56913 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.68 security and extras update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-ansible-operator
  • RHSA-2026:57409 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.19.44 security and extras update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:57488 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:56785 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.72 packages and security update
    • Red Hat OpenShift Container Platform 4.14 butane-0.19.0-5.rhaos4.14.el8, butane-redistributable-0.19.0-5.rhaos4.14.el8, cri-o-1.27.8-19.rhaos4.14.gitcea2db1.el8 +13
  • RHSA-2026:56789 Released 2026-08-26 · Red Hat rating Critical
    OpenShift Container Platform 4.14.72 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8 +5
  • RHSA-2026:56790 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.72 security and extras update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-ansible-operator
  • RHSA-2026:57546 Released 2026-08-25 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.35 security and extras update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:54603 Released 2026-08-18 · Red Hat rating Important
    OpenShift Container Platform 4.21.29 security and extras update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
  • RHSA-2026:54757 Released 2026-08-13 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
  • RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
  • RHSA-2026:49600 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.3
  • RHSA-2026:49509 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-8.el9_4
  • RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
  • RHSA-2026:47712 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.25.9-1.el9_4, golang-1.25.9-1.el9_4, golang-bin-1.25.9-1.el9_4 +4
  • RHSA-2026:47716 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-8.el9_4
  • RHSA-2026:47910 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.3, osbuild-composer-core-101.3-4.el9_4.3, osbuild-composer-worker-101.3-4.el9_4.3
  • RHSA-2026:47714 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-27.el9_4, grafana-selinux-9.2.10-27.el9_4
  • RHSA-2026:47721 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.1
  • RHSA-2026:47722 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-12.el9_2
  • RHSA-2026:47719 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.25.9-1.el9_2, golang-1.25.9-1.el9_2, golang-bin-1.25.9-1.el9_2 +5
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:40945 Released 2026-07-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:40924 Released 2026-07-16 · Red Hat rating Important
    external secrets operator for Red Hat OpenShift 1.0.1
    • external secrets operator for Red Hat OpenShift 1.0 registry.redhat.io/external-secrets-operator/external-secrets-rhel9
  • RHSA-2026:40118 Released 2026-07-15 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:36873 Released 2026-07-08 · Red Hat rating Important
    Submariner v0.20 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:36651 Released 2026-07-08 · Red Hat rating Important
    Red Hat Edge Manager Version 1.0.3 Security Update
    • Red Hat Edge Manager 1.0 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +9
  • RHSA-2026:28961 Released 2026-07-06 · Red Hat rating Important
    OpenShift Container Platform 4.15.66 packages and security update
    • Red Hat OpenShift Container Platform 4.15 containernetworking-plugins-1:1.4.0-6.rhaos4.15.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el9 +8
  • RHSA-2026:28964 Released 2026-07-01 · Red Hat rating Important
    OpenShift Container Platform 4.15.66 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2026:28886 Released 2026-07-01 · Red Hat rating Important
    OpenShift Container Platform 4.14.68 packages and security update
    • Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-6.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el9 +15
  • RHSA-2026:28893 Released 2026-07-01 · Red Hat rating Important
    OpenShift Container Platform 4.14.68 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:26541 Released 2026-06-25 · Red Hat rating Important
    OpenShift Container Platform 4.13.68 packages and security update
    • Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-7.rhaos4.13.el8, podman-3:4.4.1-19.rhaos4.13.el8, podman-3:4.4.1-20.rhaos4.13.el9 +15
  • RHSA-2026:26527 Released 2026-06-25 · Red Hat rating Important
    OpenShift Container Platform 4.12.92 packages and security update
    • Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-6.rhaos4.12.el8, skopeo-2:1.9.4-8.rhaos4.12.el8, skopeo-2:1.9.4-9.rhaos4.12.el9 +2
  • RHSA-2026:29854 Released 2026-06-25 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:28441 Released 2026-06-23 · Red Hat rating Important
    Red Hat Openshift Mirror Registry v2.0.11
    • mirror registry for Red Hat OpenShift 2.0 registry.redhat.io/openshift/mirror-registry-rhel8
  • RHSA-2026:28047 Released 2026-06-22 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 (etcd) security update
    • Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
  • RHSA-2026:26636 Released 2026-06-17 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2026:25253 Released 2026-06-11 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) runc-4:1.2.9-1.el9_2.2
  • RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
  • RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
  • RHSA-2026:25251 Released 2026-06-11 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.3
  • RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
  • RHSA-2026:25127 Released 2026-06-10 · Red Hat rating Important
    Submariner v0.21 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:21691 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.67 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:23228 Released 2026-06-04 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8
  • RHSA-2026:22937 Released 2026-06-03 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2
  • RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
  • RHSA-2026:22627 Released 2026-06-02 · Red Hat rating Important
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
  • RHSA-2026:22141 Released 2026-06-01 · Red Hat rating Moderate
    go-fdo-client and go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2, go-fdo-server-1.0.1-2.el10_2, go-fdo-server-manufacturer-1.0.1-2.el10_2 +2
  • RHSA-2026:21772 Released 2026-05-28 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.28.0 Release.
    • Red Hat OpenShift Dev Spaces 3.28 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/openvsx-rhel9 +3
  • RHSA-2026:17595 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.17 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.17 podman-5:5.2.2-18.rhaos4.17.el8, podman-5:5.2.2-18.rhaos4.17.el9, podman-catatonit-5:5.2.2-18.rhaos4.17.el8 +9
  • RHSA-2026:19634 Released 2026-05-20 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
  • RHSA-2026:17598 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:17446 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.18.42 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.18 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
    • Red Hat OpenShift Container Platform 4.18 podman-5:5.2.2-11.rhaos4.18.el8, podman-catatonit-5:5.2.2-11.rhaos4.18.el8, podman-docker-5:5.2.2-11.rhaos4.18.el8 +4
  • RHSA-2026:19475 Released 2026-05-20 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-6.el9_6, osbuild-composer-core-132.2-6.el9_6, osbuild-composer-worker-132.2-6.el9_6
  • RHSA-2026:18913 Released 2026-05-19 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-2.el9
  • RHSA-2026:19013 Released 2026-05-19 · Red Hat rating Moderate
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.26.1-1.el10_2
  • RHSA-2026:17686 Released 2026-05-14 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-6.el10_0, osbuild-composer-core-134.1-6.el10_0, osbuild-composer-worker-134.1-6.el10_0
  • RHSA-2026:17084 Released 2026-05-13 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) gvisor-tap-vsock-6:0.8.5-2.el10_0.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0.1
  • RHSA-2026:17040 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.1, podman-docker-6:5.4.0-15.el10_0.1, podman-remote-6:5.4.0-15.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.1
  • RHSA-2026:16696 Released 2026-05-13 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.1, skopeo-tests-2:1.18.1-3.el10_0.1
  • RHSA-2026:16102 Released 2026-05-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.11-1.el9_0, buildah-tests-1:1.26.11-1.el9_0
  • RHSA-2026:14100 Released 2026-05-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.89 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-tests
  • RHSA-2026:14868 Released 2026-05-07 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.8-1.el10_0, buildah-tests-2:1.39.8-1.el10_0
  • RHSA-2026:14879 Released 2026-05-07 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:12282 Released 2026-05-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.88 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:13571 Released 2026-05-04 · Red Hat rating Critical
    Streams for Apache Kafka 3.2.0 release and security update
    • Streams for Apache Kafka 3.2.0
  • RHSA-2026:13545 Released 2026-05-04 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9 +11
  • RHSA-2026:13542 Released 2026-05-04 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.2 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +1
  • RHSA-2026:12033 Released 2026-04-30 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) gvisor-tap-vsock-6:0.7.3-5.el9_4.3
  • RHSA-2026:12032 Released 2026-04-30 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) containernetworking-plugins-1:1.4.0-6.el9_4.3
  • RHSA-2026:12030 Released 2026-04-30 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) buildah-2:1.33.13-3.el9_4.1, buildah-tests-2:1.33.13-3.el9_4.1
  • RHSA-2026:12031 Released 2026-04-30 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) runc-4:1.2.9-1.el9_4.1
  • RHSA-2026:12028 Released 2026-04-30 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-20.el9_4.2, podman-docker-4:4.9.4-20.el9_4.2, podman-plugins-4:4.9.4-20.el9_4.2 +2
  • RHSA-2026:12029 Released 2026-04-30 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) skopeo-2:1.14.5-2.el9_4.4, skopeo-tests-2:1.14.5-2.el9_4.4
  • RHSA-2026:11749 Released 2026-04-29 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.6-2.el9_6, buildah-tests-2:1.39.6-2.el9_6
  • RHSA-2026:11747 Released 2026-04-29 · Red Hat rating Important
    Release of containers for RHOSO 18.0.18 security update
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +25
  • RHSA-2026:7885 Released 2026-04-29 · Red Hat rating Moderate
    Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260225161428.32d52e7.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260225161428.32d52e7.el9ost
  • RHSA-2026:11414 Released 2026-04-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.3 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +5
  • RHSA-2026:11331 Released 2026-04-28 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.2
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:10250 Released 2026-04-23 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.0 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
  • RHSA-2026:10225 Released 2026-04-23 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.0 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
  • RHSA-2026:10158 Released 2026-04-23 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.2
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:10125 Released 2026-04-23 · Red Hat rating Important
    RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
  • RHSA-2026:9848 Released 2026-04-22 · Red Hat rating Important
    multicluster engine for Kubernetes v2.6.10 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +1
  • RHSA-2026:8448 Released 2026-04-22 · Red Hat rating Important
    OpenShift Container Platform 4.18.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:9385 Released 2026-04-21 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:9109 Released 2026-04-20 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) containernetworking-plugins-1:1.6.2-3.el9_6
  • RHSA-2026:9108 Released 2026-04-20 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) gvisor-tap-vsock-6:0.8.5-2.el9_6.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1
  • RHSA-2026:9098 Released 2026-04-20 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6, skopeo-tests-2:1.18.1-5.el9_6
  • RHSA-2026:9097 Released 2026-04-20 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) runc-4:1.2.9-3.el9_6
  • RHSA-2026:8483 Released 2026-04-16 · Red Hat rating Critical
    Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8
  • RHSA-2026:7249 Released 2026-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.19.28 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:8433 Released 2026-04-16 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-operator-bundle, registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:8338 Released 2026-04-15 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:8337 Released 2026-04-15 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
  • RHSA-2026:8218 Released 2026-04-15 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.5 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +5
  • RHSA-2026:8167 Released 2026-04-14 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.0 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
  • RHSA-2026:8151 Released 2026-04-14 · Red Hat rating Important
    Submariner v0.22 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:7854 Released 2026-04-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.2, podman-docker-5:5.4.0-20.el9_6.2, podman-plugins-5:5.4.0-20.el9_6.2 +2
  • RHSA-2026:7385 Released 2026-04-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12
  • RHSA-2026:6552 Released 2026-04-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.37 packages and security update
    • Red Hat OpenShift Container Platform 4.18 skopeo-2:1.16.1-5.rhaos4.18.el9, skopeo-tests-2:1.16.1-5.rhaos4.18.el9
  • RHSA-2026:7052 Released 2026-04-08 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.14
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9 +4
  • RHSA-2026:6568 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.15.4
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:6567 Released 2026-04-03 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6497 Released 2026-04-02 · Red Hat rating Important
    Red Hat Quay 3.16.3
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:6429 Released 2026-04-02 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:6428 Released 2026-04-02 · Red Hat rating Important
    Network Observability 1.11.1 for OpenShift
    • Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +3
  • RHSA-2026:5876 Released 2026-04-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.27 packages and security update
    • Red Hat OpenShift Container Platform 4.19 runc-4:1.2.5-5.rhaos4.19.el9, skopeo-2:1.18.1-5.rhaos4.19.el9, skopeo-tests-2:1.18.1-5.rhaos4.19.el9
  • RHSA-2026:5866 Released 2026-04-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.52 packages and security update
    • Red Hat OpenShift Container Platform 4.17 containernetworking-plugins-1:1.4.0-8.rhaos4.17.el8, runc-4:1.2.9-4.rhaos4.17.el8, runc-4:1.2.9-4.rhaos4.17.el9 +4
  • RHSA-2026:6278 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-gateway-proxy-2.5.10-4.el8ap, automation-gateway-proxy-server-2.5.10-4.el8ap, python3.12-pillow-12.1.1-1.el8ap
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-gateway-proxy-2.6.14-1.el9, automation-gateway-proxy-server-2.6.14-1.el9, python3.12-pillow-12.1.1-1.el9ap
  • RHSA-2026:6277 Released 2026-03-31 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-gateway-proxy-2.6.14-1.el9, automation-gateway-proxy-server-2.6.14-1.el9, automation-platform-ui-2.6.7-1.el9ap +1
  • RHSA-2026:6226 Released 2026-03-31 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:6192 Released 2026-03-30 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.27.0 Release.
    • Red Hat OpenShift Dev Spaces 3.27 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/configbump-rhel9, registry.redhat.io/devspaces/dashboard-rhel9 +9
  • RHSA-2026:5971 Released 2026-03-26 · Red Hat rating Important
    Satellite 6.16.7 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 foreman-3.12.0.14-1.el8sat, foreman-cli-3.12.0.14-1.el8sat, foreman-debug-3.12.0.14-1.el8sat +20
    • Red Hat Satellite 6.16 for RHEL 9 foreman-3.12.0.14-1.el9sat, foreman-cli-3.12.0.14-1.el9sat, foreman-debug-3.12.0.14-1.el9sat +20
  • RHSA-2026:5970 Released 2026-03-26 · Red Hat rating Important
    Satellite 6.17.7 Async Update
    • Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.14-1.el9sat, foreman-cli-3.14.0.14-1.el9sat, foreman-debug-3.14.0.14-1.el9sat +33
  • RHSA-2026:5968 Released 2026-03-26 · Red Hat rating Important
    Satellite 6.18.4 Async Update
    • Red Hat Satellite 6.18 for RHEL 9 foreman-3.16.0.12-1.el9sat, foreman-cli-3.16.0.12-1.el9sat, foreman-debug-3.16.0.12-1.el9sat +15
  • RHSA-2026:5952 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.3
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5950 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.6
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5948 Released 2026-03-26 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.0.9
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:5851 Released 2026-03-25 · Red Hat rating Important
    DevWorkspace Operator 0.40.0 release.
    • DevWorkspace Operator 0.4 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:5665 Released 2026-03-24 · Red Hat rating Important
    Red Hat Quay 3.10.19
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:5645 Released 2026-03-24 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.1
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:5636 Released 2026-03-24 · Red Hat rating Important
    multicluster engine for Kubernetes v2.7.9 security update
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:5549 Released 2026-03-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.4
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:5452 Released 2026-03-23 · Red Hat rating Important
    RHTAS 1.3.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:5394 Released 2026-03-23 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-agent, registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:5077 Released 2026-03-19 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.1
  • RHSA-2026:5168 Released 2026-03-19 · Red Hat rating Important
    Red Hat Quay 3.9.19
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:5146 Released 2026-03-19 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.8-3.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.8-3.el10_1
  • RHSA-2026:5132 Released 2026-03-19 · Red Hat rating Important
    Kiali 1.73.28 for Red Hat OpenShift Service Mesh 2.6
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-rhel8
  • RHSA-2026:5130 Released 2026-03-19 · Red Hat rating Important
    Kiali 2.17.5 for Red Hat OpenShift Service Mesh 3.2
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:5131 Released 2026-03-19 · Red Hat rating Important
    Kiali 2.11.8 for Red Hat OpenShift Service Mesh 3.1
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:5129 Released 2026-03-19 · Red Hat rating Important
    Kiali 2.4.14 for Red Hat OpenShift Service Mesh 3.0
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:5110 Released 2026-03-19 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:4952 Released 2026-03-18 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-4.el8_10
  • RHSA-2026:4942 Released 2026-03-18 · Red Hat rating Important
    Red Hat Quay 3.12.15
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:4901 Released 2026-03-18 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-2.el9_7
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-2.el9_7
  • RHSA-2026:4907 Released 2026-03-18 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-2.el10_0
  • RHSA-2026:4892 Released 2026-03-18 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.4-2.el10_1
  • RHSA-2026:4672 Released 2026-03-17 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24081+a04d358a.s390x::container-tools:rhel8 +47
  • RHSA-2026:4500 Released 2026-03-12 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.9
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9 +4
  • RHSA-2026:4498 Released 2026-03-12 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.4.3
    • Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9 +4
  • RHSA-2026:4467 Released 2026-03-12 · Red Hat rating Important
    RHACS 4.9.4 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2026:4466 Released 2026-03-12 · Red Hat rating Important
    RHACS 4.8.9 security and bug fix update
    • Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
  • RHSA-2026:4270 Released 2026-03-11 · Red Hat rating Important
    OpenShift Source To Image 1.6.0
    • OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2026:4267 Released 2026-03-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-1.el9_4
  • RHSA-2026:4264 Released 2026-03-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-1.el9_6
  • RHSA-2026:4256 Released 2026-03-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-1.el10_0
  • RHSA-2026:3855 Released 2026-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.20.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:4177 Released 2026-03-10 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-1.el9_7
  • RHSA-2026:4220 Released 2026-03-10 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:4174 Released 2026-03-10 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-1.el10_1
  • RHSA-2026:4170 Released 2026-03-10 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:4164 Released 2026-03-10 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.6.1-7.el10_1
  • RHSA-2026:4166 Released 2026-03-10 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.2
  • RHSA-2026:3985 Released 2026-03-09 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-8.el8_10
  • RHSA-2026:3977 Released 2026-03-09 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0.2, ipp-usb-0.9.27-3.el10_0.2
  • RHSA-2026:3971 Released 2026-03-09 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.3-3.el10_1
  • RHSA-2026:3970 Released 2026-03-09 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-3.el10_0
  • RHSA-2026:3929 Released 2026-03-05 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.2
  • RHSA-2026:3928 Released 2026-03-05 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-7.el9_7
  • RHSA-2026:3898 Released 2026-03-05 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.4-4.el8_10, osbuild-composer-core-101.4-4.el8_10, osbuild-composer-worker-101.4-4.el8_10
  • RHSA-2026:3884 Released 2026-03-05 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.2 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8 +5
  • RHSA-2026:3864 Released 2026-03-05 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.25.2-2.el10_1
  • RHSA-2026:3874 Released 2026-03-05 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.18.4 security update
    • Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel8, registry.redhat.io/openshift-gitops-1/argocd-rhel8 +6
  • RHSA-2026:3842 Released 2026-03-05 · Red Hat rating Moderate
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 9) delve-1.25.2-2.el9_7
  • RHSA-2026:3839 Released 2026-03-05 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-31-3.el9_7
  • RHSA-2026:3843 Released 2026-03-05 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-2.el10_0
  • RHSA-2026:3840 Released 2026-03-05 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-31-4.el10_1
  • RHSA-2026:3833 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-18.el9_6, grafana-selinux-10.2.6-18.el9_6
  • RHSA-2026:3831 Released 2026-03-05 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-21.el10_0, grafana-selinux-10.2.6-21.el10_0
  • RHSA-2026:3817 Released 2026-03-05 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-12.el9_6
  • RHSA-2026:3816 Released 2026-03-05 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-4.el10_0
  • RHSA-2026:3782 Released 2026-03-04 · Red Hat rating Critical
    RHOAI 2.25.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +27
  • RHSA-2026:3753 Released 2026-03-04 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-149-4.el9_7, osbuild-composer-core-149-4.el9_7, osbuild-composer-worker-149-4.el9_7
  • RHSA-2026:3752 Released 2026-03-04 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-149-5.el10_1, osbuild-composer-core-149-5.el10_1, osbuild-composer-worker-149-5.el10_1
  • RHSA-2026:3559 Released 2026-03-02 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 2.6.14
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/istio-rhel8-operator, registry.redhat.io/openshift-service-mesh/pilot-rhel8 +1
  • RHSA-2026:3556 Released 2026-03-02 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 2.6.14
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/proxyv2-rhel9
  • RHSA-2026:3506 Released 2026-03-02 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-2.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-2.el10_0
  • RHSA-2026:3459 Released 2026-02-26 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.9.0 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9, registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9 +4
  • RHSA-2026:3186 Released 2026-02-26 · Red Hat rating Important
    Red Hat build of Cryostat 4.1.1: new RHEL 9 container image security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-rhel9-operator, cryostat/cryostat-storage-rhel9
  • RHSA-2026:3340 Released 2026-02-25 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.20.0-3.el9_7, skopeo-tests-2:1.20.0-3.el9_7
  • RHSA-2026:3341 Released 2026-02-25 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.7.1-3.el9_7
  • RHSA-2026:3343 Released 2026-02-25 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.20.0-3.el10_1, skopeo-tests-2:1.20.0-3.el10_1
  • RHSA-2026:3337 Released 2026-02-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.6.0-14.el9_7, podman-docker-6:5.6.0-14.el9_7, podman-plugins-6:5.6.0-14.el9_7 +2
  • RHSA-2026:3336 Released 2026-02-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.6.0-12.el10_1, podman-docker-7:5.6.0-12.el10_1, podman-remote-7:5.6.0-12.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.6.0-12.el10_1
  • RHSA-2026:3298 Released 2026-02-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.41.8-2.el9_7, buildah-tests-2:1.41.8-2.el9_7
  • RHSA-2026:3297 Released 2026-02-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.41.8-2.el10_1, buildah-tests-2:1.41.8-2.el10_1
  • RHSA-2026:3291 Released 2026-02-25 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.4.0-2.el9_7
  • RHSA-2026:3192 Released 2026-02-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.7-1.el10_0, golang-1.25.7-1.el10_0, golang-bin-1.25.7-1.el10_0 +5
  • RHSA-2026:3193 Released 2026-02-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.7-1.el9_6, golang-1.25.7-1.el9_6, golang-bin-1.25.7-1.el9_6 +5
  • RHSA-2026:3187 Released 2026-02-24 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-12.el8_10
  • RHSA-2026:3188 Released 2026-02-24 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-28.el8_10, grafana-selinux-9.2.10-28.el8_10
  • RHSA-2026:3092 Released 2026-02-23 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-5.el10_1
  • RHSA-2026:3089 Released 2026-02-23 · Red Hat rating Important
    Red Hat Developer Hub 1.8.4 release.
    • Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:3040 Released 2026-02-23 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-12.el9_7
  • RHSA-2026:3035 Released 2026-02-23 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-2.el10_1
  • RHSA-2026:2920 Released 2026-02-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-18.el9_7, grafana-selinux-10.2.6-18.el9_7
  • RHSA-2026:2914 Released 2026-02-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-22.el10_1, grafana-selinux-10.2.6-22.el10_1
  • RHSA-2026:2709 Released 2026-02-16 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.7-1.el9_7, golang-1.25.7-1.el9_7, golang-bin-1.25.7-1.el9_7 +5
  • RHSA-2026:2708 Released 2026-02-16 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
  • RHSA-2026:2706 Released 2026-02-16 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.7-1.el10_1, golang-1.25.7-1.el10_1, golang-bin-1.25.7-1.el10_1 +5

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Confidential Compute AttestationAffectedNo fix yet
Deployment Validation OperatorAffectedNo fix yet
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Gatekeeper 3Affected—
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Logical Volume Manager StorageAffected—
Machine Deletion Remediation OperatorAffectedNo fix yet
Multiarch Tuning OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat AMQ Broker 7AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix yet
Red Hat Ceph Storage 7AffectedNo fix yet
Red Hat Ceph Storage 8AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Edge Manager 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat JBoss Web Server 6AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffected—
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Openshift Data Foundation 4Affected—
Red Hat Quay 3AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Trusted Artifact SignerAffected—
Red Hat build of Apache Camel - HawtIO 4AffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix planned: Will not fix
Service Telemetry Framework 1.5Affected—
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
mirror registry for Red Hat OpenShiftAffectedNo fix planned: Will not fix
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:7885
Builds for Red Hat OpenShift 1.6.0Fixed RHSA-2026:5549
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:5645
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cryostat 4 on RHEL 9Fixed RHSA-2026:3186
Custom Metric Autoscaler 2.19Fixed RHSA-2026:26636
DevWorkspace Operator 0.4Fixed RHSA-2026:5851
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:7052
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:4500
Logging Subsystem for Red Hat OpenShift 6.4Fixed RHSA-2026:4498
Logical Volume Manager Storage 4.12Fixed RHSA-2026:88199
Logical Volume Manager Storage 4.17Fixed RHSA-2026:93598
Middleware Containers for OpenshiftFixed—
Multicluster Global Hub 1.4.9Fixed RHSA-2026:6429
Multicluster Global Hub 1.5.8Fixed RHSA-2026:5110
Multicluster Global Hub 1.6.6Fixed RHSA-2026:6226
Network Observability (NETOBSERV) 1.11.0Fixed RHSA-2026:6428
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:29854
OpenShift API for Data Protection 1.5Fixed RHSA-2026:4170
OpenShift Compliance Operator 1Fixed RHSA-2026:8433
OpenShift Developer Tools and Services 1.6.4Fixed RHSA-2026:4270
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2026:22627
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:36873
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:25127
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:8151
Red Hat Advanced Cluster Security 4.8Fixed RHSA-2026:4466
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:4467
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:6278
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:6278
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:13545
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:6277
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:5077
Red Hat Developer Hub 1.8Fixed RHSA-2026:3089
Red Hat Edge Manager 1.0Fixed RHSA-2026:36651
Red Hat Edge Manager 1.1Fixed RHSA-2026:40118, RHSA-2026:40945
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:19013, RHSA-2026:22141, RHSA-2026:22450, RHSA-2026:22937, RHSA-2026:2706, RHSA-2026:2914, RHSA-2026:3035, RHSA-2026:3092, RHSA-2026:3297, RHSA-2026:3336, RHSA-2026:3343, RHSA-2026:3752, RHSA-2026:3840, RHSA-2026:3864, RHSA-2026:3971, RHSA-2026:4164, RHSA-2026:4174, RHSA-2026:4892, RHSA-2026:5146
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:2708, RHSA-2026:3187, RHSA-2026:3188, RHSA-2026:3898, RHSA-2026:3985, RHSA-2026:4672, RHSA-2026:4952
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:18913, RHSA-2026:22714, RHSA-2026:23228, RHSA-2026:2709, RHSA-2026:2920, RHSA-2026:3040, RHSA-2026:3291, RHSA-2026:3298, RHSA-2026:3337, RHSA-2026:3340, RHSA-2026:3341, RHSA-2026:3753, RHSA-2026:3839, RHSA-2026:3842, RHSA-2026:3928, RHSA-2026:4177, RHSA-2026:4901
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:19634, RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:19634
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:16102
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25251, RHSA-2026:25252, RHSA-2026:25253, RHSA-2026:47719, RHSA-2026:47721, RHSA-2026:47722, RHSA-2026:48036, RHSA-2026:49600, RHSA-2026:67319
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:47712, RHSA-2026:47714, RHSA-2026:47716, RHSA-2026:47910, RHSA-2026:49509, RHSA-2026:72276
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:14868, RHSA-2026:16696, RHSA-2026:17040, RHSA-2026:17084, RHSA-2026:17686, RHSA-2026:3192, RHSA-2026:3506, RHSA-2026:3816, RHSA-2026:3831, RHSA-2026:3843, RHSA-2026:3970, RHSA-2026:3977, RHSA-2026:4166, RHSA-2026:4256, RHSA-2026:4907
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:12028, RHSA-2026:12029, RHSA-2026:12030, RHSA-2026:12031, RHSA-2026:12032, RHSA-2026:12033, RHSA-2026:4267
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:11749, RHSA-2026:19475, RHSA-2026:3193, RHSA-2026:3817, RHSA-2026:3833, RHSA-2026:3929, RHSA-2026:4264, RHSA-2026:5077, RHSA-2026:7854, RHSA-2026:9097, RHSA-2026:9098, RHSA-2026:9108, RHSA-2026:9109
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:19634
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:3336, RHSA-2026:5146
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:4901
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:17040, RHSA-2026:3506
Red Hat Hardened ImagesFixed RHSA-2026:7291, RHSA-2026:7385
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:4220
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat OpenShift AI 2.25Fixed RHSA-2026:3782
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:10158
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:12282, RHSA-2026:14100, RHSA-2026:26527, RHSA-2026:59830, RHSA-2026:59833, RHSA-2026:59834
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:21691, RHSA-2026:26541, RHSA-2026:65838, RHSA-2026:65840, RHSA-2026:65841
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:28886, RHSA-2026:28893, RHSA-2026:56785, RHSA-2026:56789, RHSA-2026:56790
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:28961, RHSA-2026:28964, RHSA-2026:56910, RHSA-2026:56912, RHSA-2026:56913
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:56852, RHSA-2026:56854, RHSA-2026:56855
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17595, RHSA-2026:17598, RHSA-2026:5866, RHSA-2026:60018
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:17446, RHSA-2026:57488, RHSA-2026:6552, RHSA-2026:8448
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:57409, RHSA-2026:5876, RHSA-2026:7249
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:3855, RHSA-2026:57546
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:54603
Red Hat OpenShift Dev Spaces 3.27Fixed RHSA-2026:6192
Red Hat OpenShift Dev Spaces 3.28Fixed RHSA-2026:21772
Red Hat OpenShift GitOps 1.18Fixed RHSA-2026:3874
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:3884
Red Hat OpenShift Service Mesh 2.6Fixed RHSA-2026:3556, RHSA-2026:3559, RHSA-2026:5132, RHSA-2026:8483
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:5129, RHSA-2026:5948
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:5131, RHSA-2026:5950
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:5130, RHSA-2026:5952
Red Hat OpenShift distributed tracing 3.9.3Fixed RHSA-2026:3459, RHSA-2026:9385
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:54757
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:28047, RHSA-2026:5394, RHSA-2026:66401
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:11747, RHSA-2026:7885
Red Hat Quay 3.10Fixed RHSA-2026:5665
Red Hat Quay 3.12Fixed RHSA-2026:4942
Red Hat Quay 3.15Fixed RHSA-2026:6568
Red Hat Quay 3.16Fixed RHSA-2026:6497, RHSA-2026:6567
Red Hat Quay 3.9Fixed RHSA-2026:5168
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:5971
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:5971
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:5970
Red Hat Satellite 6.18Fixed RHSA-2026:14879
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:5968
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:10125, RHSA-2026:5452
Red Hat Web Terminal 1.11Fixed RHSA-2026:10250
Red Hat Web Terminal 1.12Fixed RHSA-2026:10225
Red Hat Web Terminal 1.13Fixed RHSA-2026:8338
Red Hat Web Terminal 1.14Fixed RHSA-2026:8337
Red Hat Web Terminal 1.15Fixed RHSA-2026:8167
Streams for Apache Kafka 3.2.0Fixed RHSA-2026:13571
external secrets operator for Red Hat OpenShift 1.0Fixed RHSA-2026:40924
mirror registry for Red Hat OpenShift 2.0Fixed RHSA-2026:28441
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:13542
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:9848
multicluster engine for Kubernetes 2.7Fixed RHSA-2026:5636
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:8218
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:11414
Not affected: 96 products
  • Builds for Red Hat OpenShift 1.6.0
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler 2.19
  • DevWorkspace Operator 0.4
  • ExternalDNS Operator
  • Ironic content for Red Hat OpenShift Container Platform 4.17
  • Ironic content for Red Hat OpenShift Container Platform 4.18
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.4
  • Logical Volume Manager Storage 4.12
  • Logical Volume Manager Storage 4.17
  • Migration Toolkit for Applications 8
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability (NETOBSERV) 1.11.0
  • Node HealthCheck Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Compliance Operator 1
  • OpenShift Developer Tools and Services
  • OpenShift File Integrity Operator - FIO 1
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 3
  • Power monitoring for Red Hat OpenShift
  • Red Hat AMQ Broker 7
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Security 4.8
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Developer Hub 1.8
  • Red Hat Edge Manager 1.0
  • Red Hat Edge Manager 1.1
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Dev Spaces 3.27
  • Red Hat OpenShift Dev Spaces 3.28
  • Red Hat OpenShift GitOps 1.18
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift Service Mesh 2.6
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift distributed tracing 3.9.3
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Service Interconnect 1
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Artifact Signer 1.3
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Zero Trust Workload Identity Manager
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.7
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-68121
  2. 2026-10-03 Alias added: GHSA-h355-32pf-p2xm
  3. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  4. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  5. 2026-10-09 Affected versions changed · Red Hat
  6. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  7. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  8. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  10. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  11. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  12. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  13. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  14. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  15. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  16. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  17. 2026-10-23 Fix available: RHSA-2026:88199 · Red Hat
  18. 2026-10-23 Fix available: Logical Volume Manager Storage 4.12 · Red Hat
  19. 2026-10-27 Affected versions changed · Red Hat
  20. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  21. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  22. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  23. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  24. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  25. 2026-10-30 Affected versions changed · Red Hat
  26. 2026-10-30 Affected versions changed · Red Hat
  27. 2026-10-30 Fix available: Middleware Containers for Openshift · Red Hat
  28. 2026-11-03 Fix available: RHSA-2026:93598 · Red Hat
  29. 2026-11-03 Fix available: Logical Volume Manager Storage 4.17 · Red Hat
  30. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  31. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat

References

Exploit 1

Patch 1

Advisory 2

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences