Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40CWE-425Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 110 fixed, 42 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-425.
Summary
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00827 57th percentileScored 2026-11-07
Fix Partial net/url (Go standard library): 1.25.8, 1.26.1Red Hat: 268 advisoriesRed Hat: 110 fixed, 42 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Go standard library | net/url | before 1.25.8; 1.26.0-0 to before 1.26.1 | 1.25.8, 1.26.1 | Patch available | CNA |
- net/url VendorGo standard library Affected before 1.25.8; 1.26.0-0 to before 1.26.1 Fixed in 1.25.8, 1.26.1 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | before 1.25.8 | Vulnerable | Go standard library |
| cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:* | 1.26.0 | Vulnerable | Go standard library |
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.8 Vulnerable ·Go standard library
- cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:* Versions 1.26.0 Vulnerable ·Go standard library
Remediation
- Fix · CNA net/url (Go standard library) Fixed in 1.25.8, 1.26.1
Red Hat 268 advisories
- RHSA-2026:95612 Released 2026-11-05 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
- RHSA-2026:93598 Released 2026-11-02 · Red Hat rating ImportantLVMS 4.17 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.17 registry.redhat.io/lvms4/lvms-rhel9-operator
- RHSA-2026:91249 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.5.5 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
Show 265 more Red Hat advisories
- RHSA-2026:91248 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.4.6 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:90329 Released 2026-10-26 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security advisory
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:81525 Released 2026-10-12 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.9-0.2.hum1@aarch64, golang1.26-1.26.9-0.2.hum1@s390x, golang1.26-1.26.9-0.2.hum1@src +16
- RHSA-2026:79720 Released 2026-10-09 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.9-0.1.hum1@aarch64, golang1.26-1.26.9-0.1.hum1@src, golang1.26-1.26.9-0.1.hum1@x86_64 +14
- RHSA-2026:76752 Released 2026-10-06 · Red Hat rating ImportantOpenShift Security Profiles Operator bug fix and enhancement update
- OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
- RHSA-2026:65838 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 packages and security update
- Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-8.rhaos4.13.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el9 +14
- RHSA-2026:66401 Released 2026-09-10 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security and bug fix advisory
- Red Hat OpenStack Platform 17.1 ansible-collection-ansible-posix-1.2.0-1.4.el9ost, ansible-collections-openstack-1.9.1-17.1.20260318160829.0e9a6f2.el9ost, collectd-sensubility-0.2.1-6.el9ost +47
- RHSA-2026:59830 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.12.97 packages and security update
- Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-7.rhaos4.12.el8, cri-o-1.25.5-34.rhaos4.12.git6120b13.el8, cri-tools-1.25.0-6.el9 +13
- RHSA-2026:60018 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.57 packages and security update
- Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el8, cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el9, cri-tools-1.30.0-9.el8 +25
- RHSA-2026:56910 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.68 packages and security update
- Red Hat OpenShift Container Platform 4.15 butane-0.20.0-6.rhaos4.15.el8, butane-redistributable-0.20.0-6.rhaos4.15.el8, containernetworking-plugins-1:1.4.0-7.rhaos4.15.el8 +18
- RHSA-2026:56852 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.16.69 packages and security update
- Red Hat OpenShift Container Platform 4.16 butane-0.21.0-6.rhaos4.16.el8, butane-redistributable-0.21.0-6.rhaos4.16.el8, containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8 +34
- RHSA-2026:57482 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.18.54 packages and security update
- Red Hat OpenShift Container Platform 4.18 butane-0.23.0-5.rhaos4.18.el8, butane-redistributable-0.23.0-5.rhaos4.18.el8, cri-o-1.31.13-11.rhaos4.18.git817a650.el9 +27
- RHSA-2026:56785 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.14.72 packages and security update
- Red Hat OpenShift Container Platform 4.14 butane-0.19.0-5.rhaos4.14.el8, butane-redistributable-0.19.0-5.rhaos4.14.el8, cri-o-1.27.8-19.rhaos4.14.gitcea2db1.el8 +13
- RHSA-2026:54757 Released 2026-08-13 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2 security advisory
- Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
- RHSA-2026:54191 Released 2026-08-12 · Red Hat rating Importantrhc-worker-script security update
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.11-1.el7_9
- RHSA-2026:52389 Released 2026-08-10 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-9.el8_8, osbuild-composer-core-75-9.el8_8, osbuild-composer-dnf-json-75-9.el8_8 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-9.el8_8, osbuild-composer-core-75-9.el8_8, osbuild-composer-dnf-json-75-9.el8_8 +1
- RHSA-2026:52391 Released 2026-08-10 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-7.el8_6, osbuild-composer-core-46.3-7.el8_6, osbuild-composer-dnf-json-46.3-7.el8_6 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-7.el8_6, osbuild-composer-core-46.3-7.el8_6, osbuild-composer-dnf-json-46.3-7.el8_6 +1
- RHSA-2026:52390 Released 2026-08-10 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) osbuild-composer-28.7-6.el8_4, osbuild-composer-core-28.7-6.el8_4, osbuild-composer-worker-28.7-6.el8_4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) osbuild-composer-28.7-6.el8_4, osbuild-composer-core-28.7-6.el8_4, osbuild-composer-worker-28.7-6.el8_4
- RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
- RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Importantcontainer-tools:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
- RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
- RHSA-2026:42151 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.18.7.1 Async Update
- Red Hat Satellite 6.18 for RHEL 9 python3.12-pulpcore-3.73.30-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:42150 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.17.9.1 Async Update
- Red Hat Satellite 6.17 for RHEL 9 python-pulpcore-3.63.21-2.el9pc, python3.11-pulpcore-3.63.21-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:41928 Released 2026-07-20 · Red Hat rating ImportantRed Hat Migration Toolkit for Containers
- Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
- RHSA-2026:41019 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
- RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
- RHSA-2026:40945 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
- RHSA-2026:40118 Released 2026-07-15 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
- RHSA-2026:39810 Released 2026-07-15 · Red Hat rating ImportantRed Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
- 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- RHSA-2026:34097 Released 2026-07-09 · Red Hat rating ImportantOpenShift Container Platform 4.17.55 packages and security update
- Red Hat OpenShift Container Platform 4.17 containernetworking-plugins-1:1.4.0-9.rhaos4.17.el8, ose-aws-ecr-image-credential-provider-4.17.0-202606022046.p2.g144bace.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.17.0-202606022046.p2.g144bace.assembly.stream.el9 +22
- RHSA-2026:36796 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
- RHSA-2026:36651 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- Red Hat Edge Manager 1.0 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +9
- RHSA-2026:36317 Released 2026-07-07 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-7.el9_8, skopeo-tests-2:1.22.2-7.el9_8
- RHSA-2026:36319 Released 2026-07-07 · Red Hat rating ImportantRHACS 4.9.9 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:28961 Released 2026-07-06 · Red Hat rating ImportantOpenShift Container Platform 4.15.66 packages and security update
- Red Hat OpenShift Container Platform 4.15 containernetworking-plugins-1:1.4.0-6.rhaos4.15.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el9 +8
- RHSA-2026:34365 Released 2026-07-01 · Red Hat rating ImportantSatellite 6.19.2 Async Update
- Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
- RHSA-2026:28886 Released 2026-07-01 · Red Hat rating ImportantOpenShift Container Platform 4.14.68 packages and security update
- Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-6.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el9 +15
- RHSA-2026:28893 Released 2026-07-01 · Red Hat rating ImportantOpenShift Container Platform 4.14.68 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:33722 Released 2026-06-30 · Red Hat rating Importantcontainer-tools:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24321+617e8352.src::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.aarch64::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.ppc64le::container-tools:rhel8 +47
- RHSA-2026:26541 Released 2026-06-25 · Red Hat rating ImportantOpenShift Container Platform 4.13.68 packages and security update
- Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-7.rhaos4.13.el8, podman-3:4.4.1-19.rhaos4.13.el8, podman-3:4.4.1-20.rhaos4.13.el9 +15
- RHSA-2026:29703 Released 2026-06-25 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-3.el9_8
- RHSA-2026:26527 Released 2026-06-25 · Red Hat rating ImportantOpenShift Container Platform 4.12.92 packages and security update
- Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-6.rhaos4.12.el8, skopeo-2:1.9.4-8.rhaos4.12.el8, skopeo-2:1.9.4-9.rhaos4.12.el9 +2
- RHSA-2026:29854 Released 2026-06-25 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:29702 Released 2026-06-25 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.4.2-2.el9_8
- RHSA-2026:29455 Released 2026-06-25 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.1-2.el9_8, buildah-tests-2:1.43.1-2.el9_8
- RHSA-2026:29195 Released 2026-06-24 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-2.el10_2, buildah-tests-2:1.43.1-2.el10_2
- RHSA-2026:29035 Released 2026-06-24 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-2.el10_2, skopeo-tests-2:1.22.2-2.el10_2
- RHSA-2026:28441 Released 2026-06-23 · Red Hat rating ImportantRed Hat Openshift Mirror Registry v2.0.11
- mirror registry for Red Hat OpenShift 2.0 registry.redhat.io/openshift/mirror-registry-rhel8
- RHSA-2026:28047 Released 2026-06-22 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 (etcd) security update
- Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
- RHSA-2026:28046 Released 2026-06-22 · Red Hat rating ModerateRed Hat OpenStack Platform 17.1 (golang-uber-multierr) security update
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-7.el9ost, golang-uber-multierr-1.5.0-2.el9ost
- RHSA-2026:27076 Released 2026-06-18 · Red Hat rating ImportantSatellite 6.16.9 Async Update
- Red Hat Satellite 6.16 for RHEL 8 dynflow-utils-1.6.3-1.1.el8sat, python-pillow-12.2.0-1.el8pc, python3.11-pillow-12.2.0-1.el8pc +1
- Red Hat Satellite 6.16 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, python-pillow-12.2.0-1.el9pc, python3.11-pillow-12.2.0-1.el9pc +1
- RHSA-2026:25043 Released 2026-06-18 · Red Hat rating ImportantOpenShift Container Platform 4.16.64 packages and security update
- Red Hat OpenShift Container Platform 4.16 ose-aws-ecr-image-credential-provider-4.16.0-202606031028.p2.ga53e9de.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.16.0-202606031028.p2.ga53e9de.assembly.stream.el9, ose-azure-acr-image-credential-provider-4.16.0-202606031028.p2.ge5bac33.assembly.stream.el8 +3
- RHSA-2026:26636 Released 2026-06-17 · Red Hat rating ImportantCustom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
- Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
- RHSA-2026:26585 Released 2026-06-17 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.0.15
- Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
- RHSA-2026:26568 Released 2026-06-17 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
- RHSA-2026:25180 Released 2026-06-17 · Red Hat rating ImportantOpenShift Container Platform 4.18.44 packages and security update
- Red Hat OpenShift Container Platform 4.18 ose-aws-ecr-image-credential-provider-4.18.0-202606021914.p2.gc395190.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.18.0-202606021914.p2.gc395190.assembly.stream.el9, ose-azure-acr-image-credential-provider-4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8 +3
- RHSA-2026:26445 Released 2026-06-16 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-2.el9_8, podman-docker-6:5.8.2-2.el9_8, podman-plugins-6:5.8.2-2.el9_8 +2
- RHSA-2026:25253 Released 2026-06-11 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) runc-4:1.2.9-1.el9_2.2
- RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
- RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
- RHSA-2026:25251 Released 2026-06-11 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.3
- RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
- RHSA-2026:25127 Released 2026-06-10 · Red Hat rating ImportantSubmariner v0.21 security fixes and container updates
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
- RHSA-2026:24853 Released 2026-06-09 · Red Hat rating ImportantRed Hat Quay 3.15.5
- Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:24386 Released 2026-06-08 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-2.el10_2, podman-docker-7:5.8.2-2.el10_2, podman-remote-7:5.8.2-2.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-2.el10_2
- RHSA-2026:21696 Released 2026-06-04 · Red Hat rating ImportantOpenShift Container Platform 4.12.91 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8, registry.redhat.io/openshift4/ose-sdn-rhel8
- RHSA-2026:21691 Released 2026-06-04 · Red Hat rating ImportantOpenShift Container Platform 4.13.67 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:23345 Released 2026-06-04 · Red Hat rating ImportantMulticluster Global Hub 1.6.2 security update
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:23228 Released 2026-06-04 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8
- RHSA-2026:22937 Released 2026-06-03 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2
- RHSA-2026:22862 Released 2026-06-03 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.4.5
- Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
- RHSA-2026:21655 Released 2026-06-03 · Red Hat rating ImportantOpenShift Container Platform 4.18.43 packages and security update
- Red Hat OpenShift Container Platform 4.18 containernetworking-plugins-1:1.4.0-9.rhaos4.18.el8, podman-5:5.2.2-12.rhaos4.18.el8, podman-5:5.2.2-20.rhaos4.18.el9 +16
- RHSA-2026:21657 Released 2026-06-03 · Red Hat rating ImportantOpenShift Container Platform 4.18.43 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
- RHSA-2026:22733 Released 2026-06-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.1, osbuild-composer-core-101.3-4.el9_4.1, osbuild-composer-worker-101.3-4.el9_4.1
- RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
- RHSA-2026:22627 Released 2026-06-02 · Red Hat rating ImportantOpenShift File Integrity Operator bug fix and enhancement update
- OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
- RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
- RHSA-2026:22423 Released 2026-06-02 · Red Hat rating ImportantMulticluster Global Hub 1.3.4 security update
- Multicluster Global Hub 1.3.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:22347 Released 2026-06-01 · Red Hat rating ImportantMulticluster Global Hub 1.4.5 security update
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:20088 Released 2026-05-29 · Red Hat rating ImportantOpenShift Container Platform 4.16.63 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2026:21769 Released 2026-05-28 · Red Hat rating ImportantMulticluster Global Hub 1.5.4 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:20041 Released 2026-05-27 · Red Hat rating ImportantOpenShift Container Platform 4.19.32 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
- RHSA-2026:21017 Released 2026-05-26 · Red Hat rating ImportantRed Hat Quay 3.14.8
- Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:20889 Released 2026-05-26 · Red Hat rating ImportantRHACS 4.10.3 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8
- RHSA-2026:20584 Released 2026-05-26 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.7
- Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.7
- RHSA-2026:20582 Released 2026-05-26 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.7
- Red Hat Enterprise Linux AppStream E4S (v.8.6) git-lfs-2.13.3-3.el8_6.7
- Red Hat Enterprise Linux AppStream TUS (v.8.6) git-lfs-2.13.3-3.el8_6.7
- RHSA-2026:20581 Released 2026-05-26 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.5
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.5
- RHSA-2026:19750 Released 2026-05-20 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-7.el10_0, osbuild-composer-core-134.1-7.el10_0, osbuild-composer-worker-134.1-7.el10_0
- RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
- RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
- RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
- RHSA-2026:19634 Released 2026-05-20 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
- RHSA-2026:17598 Released 2026-05-20 · Red Hat rating ImportantOpenShift Container Platform 4.17.54 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
- RHSA-2026:19475 Released 2026-05-20 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-6.el9_6, osbuild-composer-core-132.2-6.el9_6, osbuild-composer-worker-132.2-6.el9_6
- RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
- RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
- RHSA-2026:19375 Released 2026-05-19 · Red Hat rating ImportantRed Hat Quay 3.16.4
- Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
- RHSA-2026:19181 Released 2026-05-19 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.2-1.el9_8, golang-1.26.2-1.el9_8, golang-bin-1.26.2-1.el9_8 +5
- RHSA-2026:19184 Released 2026-05-19 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-14.el9_8
- RHSA-2026:19185 Released 2026-05-19 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-21.el9_8, grafana-selinux-10.2.6-21.el9_8
- RHSA-2026:19207 Released 2026-05-19 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-5.el9_8
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-5.el9_8
- RHSA-2026:19132 Released 2026-05-19 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.7-3.el10_2
- RHSA-2026:19133 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-4.el10_2
- RHSA-2026:19126 Released 2026-05-19 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9-4.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9-4.el10_2
- RHSA-2026:19128 Released 2026-05-19 · Red Hat rating Importantyggdrasil-worker-package-manager security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-worker-package-manager-0.2.3-6.el10_2
- RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
- RHSA-2026:19032 Released 2026-05-19 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-1.el10_2, buildah-tests-2:1.43.1-1.el10_2
- RHSA-2026:19022 Released 2026-05-19 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.2-2.el10_2, golang-1.26.2-2.el10_2, golang-bin-1.26.2-2.el10_2 +5
- RHSA-2026:19017 Released 2026-05-19 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-1.el10_2, podman-docker-7:5.8.2-1.el10_2, podman-remote-7:5.8.2-1.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-1.el10_2
- RHSA-2026:19049 Released 2026-05-19 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-6.el10_2
- RHSA-2026:19055 Released 2026-05-19 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-3.el10_2
- RHSA-2026:19027 Released 2026-05-19 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-25.el10_2, grafana-selinux-10.2.6-25.el10_2
- RHSA-2026:19026 Released 2026-05-19 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-4.el10_2
- RHSA-2026:19031 Released 2026-05-19 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-1.el10_2, skopeo-tests-2:1.22.2-1.el10_2
- RHSA-2026:17287 Released 2026-05-13 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.3, podman-docker-5:5.4.0-20.el9_6.3, podman-plugins-5:5.4.0-20.el9_6.3 +2
- RHSA-2026:17084 Released 2026-05-13 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gvisor-tap-vsock-6:0.8.5-2.el10_0.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0.1
- RHSA-2026:14774 Released 2026-05-13 · Red Hat rating ImportantOpenShift Container Platform 4.15.64 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
- RHSA-2026:17040 Released 2026-05-13 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.1, podman-docker-6:5.4.0-15.el10_0.1, podman-remote-6:5.4.0-15.el10_0.1
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.1
- RHSA-2026:16875 Released 2026-05-13 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-10.el8_10
- RHSA-2026:16874 Released 2026-05-13 · Red Hat rating ImportantNetwork Observability 1.11.2 for OpenShift
- Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +1
- RHSA-2026:16696 Released 2026-05-13 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.1, skopeo-tests-2:1.18.1-3.el10_0.1
- RHSA-2026:15091 Released 2026-05-12 · Red Hat rating ImportantOpenShift Container Platform 4.14.65 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:16102 Released 2026-05-11 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.11-1.el9_0, buildah-tests-1:1.26.11-1.el9_0
- RHSA-2026:14100 Released 2026-05-08 · Red Hat rating ImportantOpenShift Container Platform 4.12.89 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-tests
- RHSA-2026:14868 Released 2026-05-07 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.8-1.el10_0, buildah-tests-2:1.39.8-1.el10_0
- RHSA-2026:14879 Released 2026-05-07 · Red Hat rating ImportantTechnical preview of the satellite/iop-vmaas-rhel9 container image
- Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
- RHSA-2026:12282 Released 2026-05-06 · Red Hat rating ImportantOpenShift Container Platform 4.12.88 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:14020 Released 2026-05-06 · Red Hat rating ImportantRelease of components for Service Telemetry Framework 1.5.7
- Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/service-telemetry-rhel9-operator, registry.redhat.io/stf/sg-core-rhel9 +1
- RHSA-2026:13829 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.10.2 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
- RHSA-2026:13791 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.9.6 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:13671 Released 2026-05-05 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 9) image-builder-31-4.el9_7
- RHSA-2026:13643 Released 2026-05-05 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-149-6.el10_1, osbuild-composer-core-149-6.el10_1, osbuild-composer-worker-149-6.el10_1
- RHSA-2026:13642 Released 2026-05-05 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 10) image-builder-31-5.el10_1
- RHSA-2026:13545 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9 +11
- RHSA-2026:13512 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.28-3.el8ap, automation-gateway-proxy-2.5.10-5.el8ap, automation-gateway-proxy-server-2.5.10-5.el8ap +19
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.28-3.el9ap, automation-gateway-proxy-2.6.14-2.el9, automation-gateway-proxy-server-2.6.14-2.el9 +19
- RHSA-2026:13508 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.4-3.el10ap, receptorctl-1.6.4-3.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.11-2.el9ap, automation-controller-cli-4.7.11-2.el9ap, automation-controller-server-4.7.11-2.el9ap +25
- RHSA-2026:12033 Released 2026-04-30 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) gvisor-tap-vsock-6:0.7.3-5.el9_4.3
- RHSA-2026:12032 Released 2026-04-30 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) containernetworking-plugins-1:1.4.0-6.el9_4.3
- RHSA-2026:12030 Released 2026-04-30 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) buildah-2:1.33.13-3.el9_4.1, buildah-tests-2:1.33.13-3.el9_4.1
- RHSA-2026:12031 Released 2026-04-30 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) runc-4:1.2.9-1.el9_4.1
- RHSA-2026:12028 Released 2026-04-30 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-20.el9_4.2, podman-docker-4:4.9.4-20.el9_4.2, podman-plugins-4:4.9.4-20.el9_4.2 +2
- RHSA-2026:12029 Released 2026-04-30 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) skopeo-2:1.14.5-2.el9_4.4, skopeo-tests-2:1.14.5-2.el9_4.4
- RHSA-2026:11996 Released 2026-04-30 · Red Hat rating ImportantRed Hat Quay 3.9.21
- Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:11916 Released 2026-04-29 · Red Hat rating ImportantRed Hat Quay 3.10.21
- Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:11856 Released 2026-04-29 · Red Hat rating ImportantRed Hat Quay 3.12.17
- Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:11800 Released 2026-04-29 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.2.10
- Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
- RHSA-2026:11749 Released 2026-04-29 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.6-2.el9_6, buildah-tests-2:1.39.6-2.el9_6
- RHSA-2026:11768 Released 2026-04-29 · Red Hat rating ImportantRed Hat Update Infrastructure 5.2 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:11747 Released 2026-04-29 · Red Hat rating ImportantRelease of containers for RHOSO 18.0.18 security update
- Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +25
- RHSA-2026:11688 Released 2026-04-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 2.6.15
- Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/istio-rhel8-operator, registry.redhat.io/openshift-service-mesh/pilot-rhel8 +1
- RHSA-2026:11686 Released 2026-04-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 2.6.15
- Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/proxyv2-rhel9
- RHSA-2026:11413 Released 2026-04-28 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.8-4.el10_1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.8-4.el10_1
- RHSA-2026:11412 Released 2026-04-28 · Red Hat rating Importantyggdrasil-worker-package-manager security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-worker-package-manager-0.2.3-5.el10_1
- RHSA-2026:11375 Released 2026-04-28 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-3.el10_0
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-3.el10_0
- RHSA-2026:11331 Released 2026-04-28 · Red Hat rating ImportantRed Hat OpenShift Builds 1.7.2
- Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
- RHSA-2026:11217 Released 2026-04-27 · Red Hat rating ImportantRHACS 4.8.11 security and bug fix update
- Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8 +2
- RHSA-2026:10929 Released 2026-04-27 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-4.el10_0
- RHSA-2026:10712 Released 2026-04-27 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) git-lfs-3.4.1-4.el9_4.5
- RHSA-2026:10701 Released 2026-04-27 · Red Hat rating Importantyggdrasil-worker-package-manager security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-worker-package-manager-0.2.3-5.el10_0
- RHSA-2026:10250 Released 2026-04-23 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.11.0 release.
- Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
- RHSA-2026:10225 Released 2026-04-23 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.12.0 release.
- Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
- RHSA-2026:10169 Released 2026-04-23 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.3-4.el10_1
- RHSA-2026:10133 Released 2026-04-23 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0.3, ipp-usb-0.9.27-3.el10_0.3
- RHSA-2026:10184 Released 2026-04-23 · Red Hat rating ImportantRHOAI 2.25.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
- RHSA-2026:10175 Released 2026-04-23 · Red Hat rating ImportantRed Hat OpenShift Dev Spaces 3.27.1 Release.
- Red Hat OpenShift Dev Spaces 3.27 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/devspaces-rhel9-operator +8
- RHSA-2026:10158 Released 2026-04-23 · Red Hat rating ImportantRed Hat OpenShift Builds 1.7.2
- Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
- RHSA-2026:10141 Released 2026-04-23 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.1
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:10140 Released 2026-04-23 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.1
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:10125 Released 2026-04-23 · Red Hat rating ImportantRHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
- RHSA-2026:10065 Released 2026-04-23 · Red Hat rating ImportantRed Hat Update Infrastructure 5.1 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
- RHSA-2026:9872 Released 2026-04-22 · Red Hat rating ImportantDevWorkspace Operator 0.40.1 release.
- DevWorkspace Operator 0.4 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator
- RHSA-2026:9742 Released 2026-04-22 · Red Hat rating CriticalRed Hat Developer Hub 1.8.6 release.
- Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:9695 Released 2026-04-22 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.2
- Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.2
- RHSA-2026:9439 Released 2026-04-21 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.3
- RHSA-2026:9461 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.3.2
- Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:9453 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.2.4
- Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:9448 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.1.7
- Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:9434 Released 2026-04-21 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.6
- RHSA-2026:9440 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.0.10
- Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:9435 Released 2026-04-21 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.3
- RHSA-2026:9436 Released 2026-04-21 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) git-lfs-2.13.3-5.el9_0.7
- RHSA-2026:9385 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
- RHSA-2026:9109 Released 2026-04-20 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) containernetworking-plugins-1:1.6.2-3.el9_6
- RHSA-2026:9108 Released 2026-04-20 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gvisor-tap-vsock-6:0.8.5-2.el9_6.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1
- RHSA-2026:9098 Released 2026-04-20 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6, skopeo-tests-2:1.18.1-5.el9_6
- RHSA-2026:9097 Released 2026-04-20 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) runc-4:1.2.9-3.el9_6
- RHSA-2026:9094 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-pcp-3.0.2-4.el8_4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) grafana-pcp-3.0.2-4.el8_4
- RHSA-2026:9093 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6
- Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-pcp-3.2.0-4.el8_6
- Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-pcp-3.2.0-4.el8_6
- RHSA-2026:9090 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2
- RHSA-2026:9044 Released 2026-04-20 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-149-5.el9_7, osbuild-composer-core-149-5.el9_7, osbuild-composer-worker-149-5.el9_7
- RHSA-2026:9043 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) grafana-7.3.6-13.el8_4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) grafana-7.3.6-13.el8_4
- RHSA-2026:9052 Released 2026-04-20 · Red Hat rating ImportantRed Hat Lightspeed (formerly Insights) for Runtimes security update
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
- RHSA-2026:8949 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-pcp-3.2.0-6.el9_0
- RHSA-2026:8930 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-9.2.10-26.el9_4, grafana-selinux-9.2.10-26.el9_4
- RHSA-2026:8931 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-5.el10_0
- RHSA-2026:8860 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-10.el8_6
- Red Hat Enterprise Linux AppStream E4S (v.8.6) grafana-7.5.11-10.el8_6
- Red Hat Enterprise Linux AppStream TUS (v.8.6) grafana-7.5.11-10.el8_6
- RHSA-2026:8882 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) grafana-pcp-5.1.1-7.el9_4
- RHSA-2026:8848 Released 2026-04-20 · Red Hat rating Importantgo-rpm-macros security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) go-filesystem-3.6.0-13.el9_6, go-rpm-macros-3.6.0-13.el9_6, go-rpm-templates-3.6.0-13.el9_6 +1
- RHSA-2026:8856 Released 2026-04-20 · Red Hat rating Importantgo-rpm-macros security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-filesystem-3.6.0-6.el10_0, go-rpm-macros-3.6.0-6.el10_0, go-rpm-templates-3.6.0-6.el10_0 +1
- RHSA-2026:8847 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-19.el9_6, grafana-selinux-10.2.6-19.el9_6
- RHSA-2026:8879 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-11.el9_2
- RHSA-2026:8878 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8
- RHSA-2026:8881 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) grafana-7.5.11-14.el9_0
- RHSA-2026:8845 Released 2026-04-20 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-13.el9_6
- RHSA-2026:8877 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-10.el8_8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-10.el8_8
- RHSA-2026:8855 Released 2026-04-20 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-1:0.2.4-5.el7_9
- RHSA-2026:8851 Released 2026-04-20 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6
- Red Hat Enterprise Linux AppStream E4S (v.8.6) rhc-1:0.2.1-14.el8_6
- Red Hat Enterprise Linux AppStream TUS (v.8.6) rhc-1:0.2.1-14.el8_6
- RHSA-2026:8849 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-22.el10_0, grafana-selinux-10.2.6-22.el10_0
- RHSA-2026:8852 Released 2026-04-20 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) rhc-1:0.2.1-13.el9_0
- RHSA-2026:8853 Released 2026-04-20 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) grafana-6.3.6-11.el8_2, grafana-azure-monitor-6.3.6-11.el8_2, grafana-cloudwatch-6.3.6-11.el8_2 +10
- RHSA-2026:8841 Released 2026-04-20 · Red Hat rating Importantgo-rpm-macros security update
- Red Hat Enterprise Linux AppStream (v. 9) go-filesystem-3.6.0-14.el9_7, go-rpm-macros-3.6.0-14.el9_7, go-rpm-templates-3.6.0-14.el9_7 +1
- RHSA-2026:8842 Released 2026-04-20 · Red Hat rating Importantdelve security update
- Red Hat Enterprise Linux AppStream (v. 10) delve-1.25.2-3.el10_1
- RHSA-2026:8840 Released 2026-04-20 · Red Hat rating Importantgo-rpm-macros security update
- Red Hat Enterprise Linux AppStream (v. 10) go-filesystem-3.6.0-8.el10_1, go-rpm-macros-3.6.0-8.el10_1, go-rpm-templates-3.6.0-8.el10_1 +1
- RHSA-2026:8493 Released 2026-04-16 · Red Hat rating CriticalKiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3
- Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:8491 Released 2026-04-16 · Red Hat rating CriticalKiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2
- Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:8490 Released 2026-04-16 · Red Hat rating CriticalKiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1
- Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:8484 Released 2026-04-16 · Red Hat rating CriticalKiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0
- Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:8483 Released 2026-04-16 · Red Hat rating CriticalKiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6
- Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8
- RHSA-2026:8456 Released 2026-04-16 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.4-5.el8_10, osbuild-composer-core-101.4-5.el8_10, osbuild-composer-worker-101.4-5.el8_10
- RHSA-2026:8434 Released 2026-04-16 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4
- RHSA-2026:8433 Released 2026-04-16 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8, registry.redhat.io/compliance/openshift-compliance-operator-bundle, registry.redhat.io/compliance/openshift-compliance-rhel8-operator
- RHSA-2026:8338 Released 2026-04-15 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.13.0 release.
- Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:8337 Released 2026-04-15 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.14.0 release.
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
- RHSA-2026:8324 Released 2026-04-15 · Red Hat rating Importantrhc security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) rhc-devel-1:0.2.4-7.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) rhc-1:0.2.4-7.el9_4
- RHSA-2026:8322 Released 2026-04-15 · Red Hat rating Criticalrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.2
- RHSA-2026:8314 Released 2026-04-15 · Red Hat rating Importantdelve security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-3.el10_0
- RHSA-2026:8291 Released 2026-04-15 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.2-1.1.hum1@aarch64, golang1.26-1.26.2-1.1.hum1@src, golang1.26-1.26.2-1.1.hum1@x86_64 +12
- RHSA-2026:8167 Released 2026-04-14 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.15.0 release.
- Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator
- RHSA-2026:8151 Released 2026-04-14 · Red Hat rating ImportantSubmariner v0.22 security fixes and container updates
- Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
- RHSA-2026:7992 Released 2026-04-14 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream (v. 10) golang-github-openprinting-ipp-usb-0.9.27-5.el10_1.1, ipp-usb-0.9.27-5.el10_1.1
- RHSA-2026:7883 Released 2026-04-13 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) golang-1.17.13-11.el9_0, golang-bin-1.17.13-11.el9_0, golang-docs-1.17.13-11.el9_0 +4
- RHSA-2026:7876 Released 2026-04-13 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
- Red Hat Enterprise Linux AppStream E4S (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.aarch64::go-toolset:rhel8 +18
- Red Hat Enterprise Linux AppStream TUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.src::go-toolset:rhel8 +9
- RHSA-2026:7877 Released 2026-04-13 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-4.module+el8.8.0+23976+18ba1869.ppc64le::go-toolset:rhel8 +12
- Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-4.module+el8.8.0+23976+18ba1869.src::go-toolset:rhel8 +9
- RHSA-2026:7879 Released 2026-04-13 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src::go-toolset:rhel8, delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64::go-toolset:rhel8, go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src::go-toolset:rhel8 +9
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.src::go-toolset:rhel8, delve-1.5.0-2.module+el8.4.0+8864+58b0fcdb.x86_64::go-toolset:rhel8, go-toolset-1.15.14-3.module+el8.4.0+22765+91da4d3f.src::go-toolset:rhel8 +9
- RHSA-2026:7878 Released 2026-04-13 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) delve-1.3.2-3.module+el8.2.0+5581+896cb53e.src::go-toolset:rhel8, delve-1.3.2-3.module+el8.2.0+5581+896cb53e.x86_64::go-toolset:rhel8, go-toolset-1.13.15-1.module+el8.2.0+7662+fa98b974.src::go-toolset:rhel8 +9
- RHSA-2026:7834 Released 2026-04-13 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) go-toolset-1.21.13-15.el9_4, golang-1.21.13-15.el9_4, golang-bin-1.21.13-15.el9_4 +4
- RHSA-2026:7833 Released 2026-04-13 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) golang-1.19.13-24.el9_2, golang-bin-1.19.13-24.el9_2, golang-docs-1.19.13-24.el9_2 +4
- RHSA-2026:7674 Released 2026-04-13 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-5.el8_10
- RHSA-2026:7665 Released 2026-04-13 · Red Hat rating Importantrhc security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.2
- Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.2
- RHSA-2026:7669 Released 2026-04-13 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.4-3.el10_1
- RHSA-2026:7385 Released 2026-04-10 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
- RHSA-2026:7328 Released 2026-04-09 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-3.el10_0
- RHSA-2026:7315 Released 2026-04-09 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-3.el9_7
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-3.el9_7
- RHSA-2026:6564 Released 2026-04-09 · Red Hat rating ImportantOpenShift Container Platform 4.20.18 bug fix and security update
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
- RHSA-2026:7291 Released 2026-04-09 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12
- RHSA-2026:7259 Released 2026-04-09 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-8.el9_7
- RHSA-2026:7011 Released 2026-04-08 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-29.el8_10, grafana-selinux-9.2.10-29.el8_10
- RHSA-2026:7009 Released 2026-04-08 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-13.el8_10
- RHSA-2026:7005 Released 2026-04-08 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.6.1-8.el10_1
- RHSA-2026:6949 Released 2026-04-08 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
- RHSA-2026:6802 Released 2026-04-07 · Red Hat rating ImportantRed Hat Developer Hub 1.9.3 release.
- Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:6720 Released 2026-04-06 · Red Hat rating ImportantRed Hat Quay 3.12.16
- Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:6383 Released 2026-04-01 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-13.el9_7
- RHSA-2026:6382 Released 2026-04-01 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-19.el9_7, grafana-selinux-10.2.6-19.el9_7
- RHSA-2026:6388 Released 2026-04-01 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-3.el10_1
- RHSA-2026:6344 Released 2026-04-01 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-23.el10_1, grafana-selinux-10.2.6-23.el10_1
- RHSA-2026:6341 Released 2026-04-01 · Red Hat rating ImportantRed Hat build of Cryostat security update
- Cryostat 4 on RHEL 9 cryostat/cryostat-storage-rhel9
- RHSA-2026:5944 Released 2026-03-26 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.8-1.el9_6, golang-1.25.8-1.el9_6, golang-bin-1.25.8-1.el9_6 +5
- RHSA-2026:5942 Released 2026-03-26 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.8-1.el9_7, golang-1.25.8-1.el9_7, golang-bin-1.25.8-1.el9_7 +5
- RHSA-2026:5943 Released 2026-03-26 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.8-1.el10_0, golang-1.25.8-1.el10_0, golang-bin-1.25.8-1.el10_0 +5
- RHSA-2026:5941 Released 2026-03-26 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.8-1.el10_1, golang-1.25.8-1.el10_1, golang-bin-1.25.8-1.el10_1 +5
- RHSA-2026:5549 Released 2026-03-24 · Red Hat rating ImportantRed Hat OpenShift Builds 1.6.4
- Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
- RHSA-2026:5110 Released 2026-03-19 · Red Hat rating ImportantMulticluster Global Hub 1.5.4 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Affected | No fix yet |
| Confidential Compute Attestation | Affected | No fix yet |
| Deployment Validation Operator | Affected | No fix yet |
| External Secrets Operator for Red Hat OpenShift | Affected | No fix planned: Will not fix |
| ExternalDNS Operator | Affected | No fix yet |
| Fence Agents Remediation Operator | Affected | No fix yet |
| File Integrity Operator | Affected | No fix yet |
| Gatekeeper 3 | Affected | No fix yet |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix planned: Will not fix |
| Logical Volume Manager Storage | Affected | No fix yet |
| Machine Deletion Remediation Operator | Affected | No fix yet |
| Multicluster Engine for Kubernetes | Affected | — |
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| OpenShift Service Mesh 2 | Affected | No fix yet |
| OpenShift Service Mesh 3 | Affected | No fix yet |
| Red Hat 3scale API Management Platform 2 | Affected | No fix yet |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Connectivity Link 1 | Affected | No fix yet |
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 8 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
| Red Hat OpenShift Cluster Manager CLI | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Red Hat OpenShift GitOps | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet |
| Red Hat Openshift Data Foundation 4 | Affected | No fix yet |
| Red Hat Quay 3 | Affected | No fix yet |
| Red Hat Satellite 6 | Affected | No fix yet |
| Red Hat Service Interconnect 1 | Affected | No fix planned: Will not fix |
| Red Hat Service Interconnect 2 | Affected | No fix planned: Will not fix |
| Red Hat Trusted Artifact Signer | Affected | No fix yet |
| Zero Trust Workload Identity Manager | Affected | No fix yet |
| Zero Trust Workload Identity Manager - Tech Preview | Affected | No fix planned: Will not fix |
| mirror registry for Red Hat OpenShift | Affected | No fix yet |
| streams for Apache Kafka 3 | Affected | No fix planned: Will not fix |
| 9Base-RHOSO-TOOLS-18 | Fixed | RHSA-2026:39810 |
| Builds for Red Hat OpenShift 1.6.0 | Fixed | RHSA-2026:5549 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372 |
| Cryostat 4 on RHEL 9 | Fixed | RHSA-2026:6341 |
| Custom Metric Autoscaler 2.19 | Fixed | RHSA-2026:26636 |
| DevWorkspace Operator 0.4 | Fixed | RHSA-2026:9872 |
| Logging Subsystem for Red Hat OpenShift 6.0 | Fixed | RHSA-2026:26585 |
| Logging Subsystem for Red Hat OpenShift 6.2 | Fixed | RHSA-2026:11800 |
| Logging Subsystem for Red Hat OpenShift 6.4 | Fixed | RHSA-2026:22862 |
| Logical Volume Manager Storage 4.17 | Fixed | RHSA-2026:93598 |
| Multicluster Global Hub 1.3.4 | Fixed | RHSA-2026:22423 |
| Multicluster Global Hub 1.4.9 | Fixed | RHSA-2026:22347 |
| Multicluster Global Hub 1.5.8 | Fixed | RHSA-2026:21769, RHSA-2026:5110 |
| Multicluster Global Hub 1.6.6 | Fixed | RHSA-2026:23345 |
| Network Observability (NETOBSERV) 1.11.0 | Fixed | RHSA-2026:16874 |
| OpenShift API for Data Protection 1.4 | Fixed | RHSA-2026:29854 |
| OpenShift API for Data Protection 1.5 | Fixed | RHSA-2026:26568 |
| OpenShift Compliance Operator 1 | Fixed | RHSA-2026:8433, RHSA-2026:95612 |
| OpenShift File Integrity Operator - FIO 1 | Fixed | RHSA-2026:22627 |
| OpenShift Security Profiles Operator 1 | Fixed | RHSA-2026:76752 |
| RHEM 1.0 for RHEL 9 | Fixed | RHSA-2026:36796 |
| RHEM 1.1 for RHEL 10 | Fixed | RHSA-2026:41019 |
| RHEM 1.1 for RHEL 9 | Fixed | RHSA-2026:41019 |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 | Fixed | RHSA-2026:25127 |
| Red Hat Advanced Cluster Management for Kubernetes 2.15 | Fixed | RHSA-2026:8151 |
| Red Hat Advanced Cluster Security 4.8 | Fixed | RHSA-2026:11217 |
| Red Hat Advanced Cluster Security 4.9 | Fixed | RHSA-2026:13791, RHSA-2026:36319 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 | Fixed | RHSA-2026:13829, RHSA-2026:20889 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:13512 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:13512 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:13545 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Fixed | RHSA-2026:13508 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:13508 |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2026:8324 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:7665 |
| Red Hat Developer Hub 1.8 | Fixed | RHSA-2026:9742 |
| Red Hat Developer Hub 1.9 | Fixed | RHSA-2026:6802 |
| Red Hat Edge Manager 1.0 | Fixed | RHSA-2026:36651 |
| Red Hat Edge Manager 1.1 | Fixed | RHSA-2026:40118, RHSA-2026:40945 |
| Red Hat Enterprise Linux AI 3.3 | Fixed | RHSA-2026:10140, RHSA-2026:10141 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:10169, RHSA-2026:11412, RHSA-2026:11413, RHSA-2026:13642, RHSA-2026:13643, RHSA-2026:19017, RHSA-2026:19022, RHSA-2026:19026, RHSA-2026:19027, RHSA-2026:19031, RHSA-2026:19032, RHSA-2026:19049, RHSA-2026:19055, RHSA-2026:19126, RHSA-2026:19128, RHSA-2026:19132, RHSA-2026:19133, RHSA-2026:19135, RHSA-2026:22450, RHSA-2026:22937, RHSA-2026:24386, RHSA-2026:29035, RHSA-2026:29195, RHSA-2026:5941, RHSA-2026:6344, RHSA-2026:6388, RHSA-2026:7005, RHSA-2026:7669, RHSA-2026:7992, RHSA-2026:8840, RHSA-2026:8842 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:16875, RHSA-2026:33722, RHSA-2026:6949, RHSA-2026:7009, RHSA-2026:7011, RHSA-2026:7674, RHSA-2026:8456 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:13671, RHSA-2026:19181, RHSA-2026:19184, RHSA-2026:19185, RHSA-2026:19207, RHSA-2026:19350, RHSA-2026:19353, RHSA-2026:22714, RHSA-2026:23228, RHSA-2026:26445, RHSA-2026:29455, RHSA-2026:29702, RHSA-2026:29703, RHSA-2026:36317, RHSA-2026:5942, RHSA-2026:6382, RHSA-2026:6383, RHSA-2026:7259, RHSA-2026:7315, RHSA-2026:8841, RHSA-2026:9044 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2026:7878, RHSA-2026:8853 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:20581, RHSA-2026:52390, RHSA-2026:7879, RHSA-2026:8434, RHSA-2026:9043, RHSA-2026:9094 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:19634, RHSA-2026:20582, RHSA-2026:51288, RHSA-2026:52391, RHSA-2026:7876, RHSA-2026:8851, RHSA-2026:8860, RHSA-2026:9093 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2026:19634, RHSA-2026:20582, RHSA-2026:7876, RHSA-2026:8851, RHSA-2026:8860, RHSA-2026:9093 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:20584, RHSA-2026:49944, RHSA-2026:52389, RHSA-2026:7877, RHSA-2026:8877, RHSA-2026:8878, RHSA-2026:9695 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:16102, RHSA-2026:7883, RHSA-2026:8852, RHSA-2026:8881, RHSA-2026:8949, RHSA-2026:9436 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25251, RHSA-2026:25252, RHSA-2026:25253, RHSA-2026:48036, RHSA-2026:7833, RHSA-2026:8322, RHSA-2026:8879, RHSA-2026:9090, RHSA-2026:9434 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:22733 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:10133, RHSA-2026:10701, RHSA-2026:10929, RHSA-2026:11375, RHSA-2026:14868, RHSA-2026:16696, RHSA-2026:17040, RHSA-2026:17084, RHSA-2026:19719, RHSA-2026:19750, RHSA-2026:5943, RHSA-2026:7328, RHSA-2026:8314, RHSA-2026:8849, RHSA-2026:8856, RHSA-2026:8931, RHSA-2026:9435 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:10712, RHSA-2026:12028, RHSA-2026:12029, RHSA-2026:12030, RHSA-2026:12031, RHSA-2026:12032, RHSA-2026:12033, RHSA-2026:19721, RHSA-2026:7834, RHSA-2026:8324, RHSA-2026:8882, RHSA-2026:8930 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:11749, RHSA-2026:17287, RHSA-2026:19475, RHSA-2026:19720, RHSA-2026:5944, RHSA-2026:7665, RHSA-2026:8845, RHSA-2026:8847, RHSA-2026:8848, RHSA-2026:9097, RHSA-2026:9098, RHSA-2026:9108, RHSA-2026:9109, RHSA-2026:9439 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:20581, RHSA-2026:52390, RHSA-2026:7879, RHSA-2026:8434, RHSA-2026:9043, RHSA-2026:9094 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:51288, RHSA-2026:52391 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2026:19634, RHSA-2026:20582, RHSA-2026:7876, RHSA-2026:8851, RHSA-2026:8860, RHSA-2026:9093 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:20584, RHSA-2026:49944, RHSA-2026:52389, RHSA-2026:7877, RHSA-2026:8877, RHSA-2026:8878, RHSA-2026:9695 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:11413, RHSA-2026:19017, RHSA-2026:19126, RHSA-2026:24386 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:19207, RHSA-2026:7315 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:11375, RHSA-2026:17040 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:54191, RHSA-2026:8855 |
| Red Hat Hardened Images | Fixed | RHSA-2026:7291, RHSA-2026:7385, RHSA-2026:79720, RHSA-2026:81525, RHSA-2026:8291 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 | Fixed | RHSA-2026:9052 |
| Red Hat Migration Toolkit 1.8 | Fixed | RHSA-2026:41928 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:10184 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:91248 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:91249 |
| Red Hat OpenShift Builds 1.7.3 | Fixed | RHSA-2026:10158 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:12282, RHSA-2026:14100, RHSA-2026:21696, RHSA-2026:26527, RHSA-2026:59830 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:21691, RHSA-2026:26541, RHSA-2026:65838 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:15091, RHSA-2026:28886, RHSA-2026:28893, RHSA-2026:56785 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:14774, RHSA-2026:28961, RHSA-2026:56910 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:20088, RHSA-2026:25043, RHSA-2026:56852 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:17598, RHSA-2026:34097, RHSA-2026:60018 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:21655, RHSA-2026:21657, RHSA-2026:25180, RHSA-2026:57482 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:20041 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:6564 |
| Red Hat OpenShift Dev Spaces 3.27 | Fixed | RHSA-2026:10175 |
| Red Hat OpenShift Service Mesh 2.6 | Fixed | RHSA-2026:11686, RHSA-2026:11688, RHSA-2026:8483 |
| Red Hat OpenShift Service Mesh 3.0 | Fixed | RHSA-2026:8484, RHSA-2026:9440 |
| Red Hat OpenShift Service Mesh 3.1 | Fixed | RHSA-2026:8490, RHSA-2026:9448 |
| Red Hat OpenShift Service Mesh 3.2 | Fixed | RHSA-2026:8491, RHSA-2026:9453 |
| Red Hat OpenShift Service Mesh 3.3 | Fixed | RHSA-2026:8493, RHSA-2026:9461 |
| Red Hat OpenShift Service on AWS 1.0 | Fixed | — |
| Red Hat OpenShift distributed tracing 3.9.3 | Fixed | RHSA-2026:9385 |
| Red Hat OpenStack 1.5 | Fixed | RHSA-2026:14020 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2026:54757 |
| Red Hat OpenStack Platform 17.1 | Fixed | RHSA-2026:28046, RHSA-2026:28047, RHSA-2026:66401, RHSA-2026:90329 |
| Red Hat OpenStack Services on OpenShift 18.0 | Fixed | RHSA-2026:11747, RHSA-2026:39810 |
| Red Hat Quay 3.10 | Fixed | RHSA-2026:11916 |
| Red Hat Quay 3.12 | Fixed | RHSA-2026:11856, RHSA-2026:6720 |
| Red Hat Quay 3.14 | Fixed | RHSA-2026:21017 |
| Red Hat Quay 3.15 | Fixed | RHSA-2026:24853 |
| Red Hat Quay 3.16 | Fixed | RHSA-2026:19375 |
| Red Hat Quay 3.9 | Fixed | RHSA-2026:11996 |
| Red Hat Satellite 6.16 for RHEL 8 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.16 for RHEL 9 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.17 for RHEL 9 | Fixed | RHSA-2026:42150 |
| Red Hat Satellite 6.18 | Fixed | RHSA-2026:14879 |
| Red Hat Satellite 6.18 for RHEL 9 | Fixed | RHSA-2026:42151 |
| Red Hat Satellite 6.19 for RHEL 9 | Fixed | RHSA-2026:34365 |
| Red Hat Trusted Artifact Signer 1.3 | Fixed | RHSA-2026:10125 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:10065, RHSA-2026:11768 |
| Red Hat Web Terminal 1.11 | Fixed | RHSA-2026:10250 |
| Red Hat Web Terminal 1.12 | Fixed | RHSA-2026:10225 |
| Red Hat Web Terminal 1.13 | Fixed | RHSA-2026:8338 |
| Red Hat Web Terminal 1.14 | Fixed | RHSA-2026:8337 |
| Red Hat Web Terminal 1.15 | Fixed | RHSA-2026:8167 |
| mirror registry for Red Hat OpenShift 2.0 | Fixed | RHSA-2026:28441 |
Not affected: 98 products
- Builds for Red Hat OpenShift 1.6.0
- Cryostat 4 on RHEL 9
- Custom Metric Autoscaler 2.19
- DevWorkspace Operator 0.4
- Logging Subsystem for Red Hat OpenShift 6.0
- Logging Subsystem for Red Hat OpenShift 6.2
- Logging Subsystem for Red Hat OpenShift 6.4
- Logical Volume Manager Storage
- Logical Volume Manager Storage 4.17
- Migration Toolkit for Applications 8
- Multicluster Engine for Kubernetes
- Multicluster Global Hub 1.3.4
- Multicluster Global Hub 1.4.9
- Multicluster Global Hub 1.5.8
- Multicluster Global Hub 1.6.6
- Network Observability (NETOBSERV) 1.11.0
- Node HealthCheck Operator
- OpenShift API for Data Protection 1.4
- OpenShift API for Data Protection 1.5
- OpenShift Compliance Operator 1
- OpenShift File Integrity Operator - FIO 1
- OpenShift Security Profiles Operator 1
- OpenShift Serverless
- OpenShift Service Mesh 3
- Power monitoring for Red Hat OpenShift
- RHEM 1.0 for RHEL 9
- RHEM 1.1 for RHEL 10
- RHEM 1.1 for RHEL 9
- Red Hat AMQ Clients
- Red Hat Advanced Cluster Management for Kubernetes 2.14
- Red Hat Advanced Cluster Management for Kubernetes 2.15
- Red Hat Advanced Cluster Security 4.8
- Red Hat Advanced Cluster Security 4.9
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Developer Hub 1.8
- Red Hat Developer Hub 1.9
- Red Hat Edge Manager 1.0
- Red Hat Edge Manager 1.1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Enterprise Linux AppStream (v. 8)
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
- Red Hat Migration Toolkit 1.8
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift Builds 1.7.3
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Red Hat OpenShift Container Platform 5
- Red Hat OpenShift Dev Spaces 3.27
- Red Hat OpenShift Service Mesh 2.6
- Red Hat OpenShift Service Mesh 3.0
- Red Hat OpenShift Service Mesh 3.1
- Red Hat OpenShift Service Mesh 3.2
- Red Hat OpenShift Service Mesh 3.3
- Red Hat OpenShift Virtualization 4
- Red Hat OpenShift distributed tracing 3.9.3
- Red Hat OpenShift for Windows Containers
- Red Hat OpenStack 1.5
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat OpenStack Services on OpenShift 18.0
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Red Hat Quay 3.14
- Red Hat Quay 3.15
- Red Hat Quay 3.16
- Red Hat Quay 3.9
- Red Hat Satellite 6.16 for RHEL 8
- Red Hat Satellite 6.16 for RHEL 9
- Red Hat Satellite 6.17 for RHEL 9
- Red Hat Satellite 6.18 for RHEL 9
- Red Hat Satellite 6.19 for RHEL 9
- Red Hat Service Interconnect 1
- Red Hat Service Interconnect 2
- Red Hat Update Infrastructure 5
- Red Hat Web Terminal 1.11
- Red Hat Web Terminal 1.12
- Red Hat Web Terminal 1.13
- Red Hat Web Terminal 1.14
- Red Hat Web Terminal 1.15
- Red Hat build of Apache Camel - HawtIO 4
Timeline
- 2026-10-02 Threatist record created from CVE-2026-25679
- 2026-10-03 Alias added: GHSA-j3gx-2473-5fp8
- 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
- 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
- 2026-10-12 Fix available: RHSA-2026:79720 · Red Hat
- 2026-10-12 Affected versions changed · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-16 Fix available: RHSA-2026:81525 · Red Hat
- 2026-10-16 Fix available: RHSA-2026:8291 · Red Hat
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
- 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
- 2026-10-26 Affected versions changed · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
- 2026-10-30 Fix available: Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-10-30 Fix available: Red Hat OpenShift Service on AWS 1.0 · Red Hat
- 2026-11-03 Fix available: RHSA-2026:93598 · Red Hat
- 2026-11-03 Fix available: Logical Volume Manager Storage 4.17 · Red Hat
- 2026-11-05 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
- 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
References
More Go standard library Go vulnerabilities
- TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
- TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
- TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
- TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-25679 · CVE Program
- CVE-2026-25679 · NVD
- FIRST EPSS
- GHSA-j3gx-2473-5fp8 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-25679 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences