Read the docs
TI-2026-21595 Aliases CVE-2026-27145GHSA-4279-q6mj-392r

Inefficient candidate hostname parsing in crypto/x509

Priority LOW 30Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · Low · High
Fix status
Partial Red Hat: 93 fixed, 41 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00591 48th percentileScored 2026-11-07
Fix Partial crypto/x509 (Go standard library): 1.25.11, 1.26.4Red Hat: 125 advisoriesRed Hat: 93 fixed, 41 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/x509before 1.25.11; 1.26.0-0 to before 1.26.41.25.11, 1.26.4Patch availableCNA
  • crypto/x509 VendorGo standard library Affected before 1.25.11; 1.26.0-0 to before 1.26.4 Fixed in 1.25.11, 1.26.4 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*——Go standard library

Remediation

  • Fix · CNA crypto/x509 (Go standard library) Fixed in 1.25.11, 1.26.4

Red Hat 125 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:95591 Released 2026-11-05 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95576 Released 2026-11-05 · Red Hat rating Important
    Release of containers for RHOSO 18.0.22
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +23
Show 122 more Red Hat advisories
  • RHSA-2026:95206 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:95081 Released 2026-11-04 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
  • RHSA-2026:91613 Released 2026-10-28 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:90332 Released 2026-10-26 · Red Hat rating Important
    RHOSO 18.0 os-diff security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
  • RHSA-2026:90329 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security advisory
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:80684 Released 2026-10-12 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:70645 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.99 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8, cri-o-1.25.5-8.rhaos4.12.git6120b13.el9, cri-tools-1.25.0-7.el9 +9
  • RHSA-2026:68681 Released 2026-09-17 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.17 update
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-registry-rhel8, registry.redhat.io/rhmtc/openshift-migration-ui-rhel8
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:68335 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • RHEM 1.2 for RHEL 10 flightctl-1.2.1-1.el10, flightctl-agent-1.2.1-1.el10, flightctl-cli-1.2.1-1.el10
    • RHEM 1.2 for RHEL 9 flightctl-1.2.1-1.el9, flightctl-agent-1.2.1-1.el9, flightctl-cli-1.2.1-1.el9
  • RHSA-2026:68254 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:68044 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:68006 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:66352 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:60025 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 security and extras update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9 +1
  • RHSA-2026:63016 Released 2026-09-03 · Red Hat rating Important
    Submariner v0.24 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/subctl-rhel9 +4
  • RHSA-2026:61314 Released 2026-08-31 · Red Hat rating Important
    Cluster Observability Operator 1.5.2
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator +10
  • RHSA-2026:61253 Released 2026-08-31 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.5-1.el9_2, golang-1.26.5-1.el9_2, golang-bin-1.26.5-1.el9_2 +5
  • RHSA-2026:60391 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +19
  • RHSA-2026:60390 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +23
  • RHSA-2026:60388 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +26
  • RHSA-2026:60387 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +24
  • RHSA-2026:60386 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +31
  • RHSA-2026:60354 Released 2026-08-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.4
  • RHSA-2026:57482 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 packages and security update
    • Red Hat OpenShift Container Platform 4.18 butane-0.23.0-5.rhaos4.18.el8, butane-redistributable-0.23.0-5.rhaos4.18.el8, cri-o-1.31.13-11.rhaos4.18.git817a650.el9 +27
  • RHSA-2026:60315 Released 2026-08-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-9.el9_4
  • RHSA-2026:57488 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:59593 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.17.2 security update
    • multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +6
  • RHSA-2026:59579 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.6.14 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +17
  • RHSA-2026:59559 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.7 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +15
  • RHSA-2026:59558 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.10 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9 +20
  • RHSA-2026:59557 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.6 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +16
  • RHSA-2026:59556 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.6 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +14
  • RHSA-2026:57649 Released 2026-08-20 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.5-1.el9_4, golang-1.26.5-1.el9_4, golang-bin-1.26.5-1.el9_4 +5
  • RHSA-2026:57194 Released 2026-08-19 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.5 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +11
  • RHSA-2026:54603 Released 2026-08-18 · Red Hat rating Important
    OpenShift Container Platform 4.21.29 security and extras update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
  • RHSA-2026:55899 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.16.1 release.
    • Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:54757 Released 2026-08-13 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
  • RHSA-2026:54531 Released 2026-08-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.1
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:54525 Released 2026-08-13 · Red Hat rating Important
    external secrets operator for Red Hat OpenShift 1.1.1
    • external secrets operator for Red Hat OpenShift 1.1 registry.redhat.io/external-secrets-operator/external-secrets-rhel9
  • RHSA-2026:54500 Released 2026-08-13 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
  • RHSA-2026:54441 Released 2026-08-12 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:54435 Released 2026-08-12 · Red Hat rating Important
    Streams for Apache Kafka 3.2.1 release and security update
    • Streams for Apache Kafka 3.2.1
  • RHSA-2026:54432 Released 2026-08-12 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.5 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +1
  • RHSA-2026:54427 Released 2026-08-12 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +9
  • RHSA-2026:54401 Released 2026-08-12 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.5
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.5
  • RHSA-2026:54168 Released 2026-08-12 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-6.el10_0
  • RHSA-2026:53530 Released 2026-08-11 · Red Hat rating Critical
    Multicluster Global Hub 1.7.2 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:53415 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.152.1-1.el9_6
  • RHSA-2026:53412 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.152.1-1.el9_4
  • RHSA-2026:53416 Released 2026-08-11 · Red Hat rating Important
    host-metering security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-8.el7_9, host-metering-selinux-1.4.0-8.el7_9
  • RHSA-2026:53413 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.152.1-1.el10_0
  • RHSA-2026:53374 Released 2026-08-11 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-5.el10_0
  • RHSA-2026:52946 Released 2026-08-10 · Red Hat rating Critical
    Multicluster Global Hub 1.8.1 security update
    • Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator
  • RHSA-2026:51187 Released 2026-08-06 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-5.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-5.el10_0
  • RHSA-2026:51057 Released 2026-08-06 · Red Hat rating Important
    OpenShift Source To Image 1.6.3
    • OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2026:50888 Released 2026-08-05 · Red Hat rating Important
    RHTAS 1.4.3 - CLI Stack Release
    • Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
  • RHSA-2026:50319 Released 2026-08-04 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.31-1.el8ap, automation-eda-controller-1.1.21-1.el8ap, automation-eda-controller-base-1.1.21-1.el8ap +11
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.31-1.el9ap, automation-eda-controller-1.1.21-1.el9ap, automation-eda-controller-base-1.1.21-1.el9ap +11
  • RHSA-2026:50205 Released 2026-08-04 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.10.1 release
    • Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator
  • RHSA-2026:49770 Released 2026-08-03 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.4.1
    • Red Hat OpenShift Service Mesh 3.4 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:49767 Released 2026-08-03 · Red Hat rating Important
    RHTAS 1.4.3 - CLI Stack Release
    • Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
  • RHSA-2026:49765 Released 2026-08-03 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.3.6
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:49712 Released 2026-08-03 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.5-1.el9_6, golang-1.26.5-1.el9_6, golang-bin-1.26.5-1.el9_6 +5
  • RHSA-2026:49744 Released 2026-08-03 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.8
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:49729 Released 2026-08-03 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.11
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:49705 Released 2026-08-03 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.0.14
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:49703 Released 2026-08-03 · Red Hat rating Important
    delve security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-1.el10_0
  • RHSA-2026:49702 Released 2026-08-03 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.5-1.el10_0, golang-1.26.5-1.el10_0, golang-bin-1.26.5-1.el10_0 +5
  • RHSA-2026:48771 Released 2026-07-30 · Red Hat rating Important
    RHTAS 1.4.3 - CLI Stack Release
    • Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
  • RHSA-2026:47737 Released 2026-07-29 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +6
  • RHSA-2026:47735 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.8.9 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9 +5
  • RHSA-2026:47149 Released 2026-07-28 · Red Hat rating Important
    Multicluster Global Hub 1.7.2 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:46395 Released 2026-07-27 · Red Hat rating Important
    go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-server-1.0.1-2.el10_2.3, go-fdo-server-manufacturer-1.0.1-2.el10_2.3, go-fdo-server-owner-1.0.1-2.el10_2.3 +1
  • RHSA-2026:46394 Released 2026-07-27 · Red Hat rating Important
    go-fdo-client security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2.5
  • RHSA-2026:44622 Released 2026-07-23 · Red Hat rating Important
    Multicluster Global Hub 1.6.4 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:42946 Released 2026-07-21 · Red Hat rating Important
    rhc-worker-playbook security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.10-1.el10_2
  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:42240 Released 2026-07-20 · Red Hat rating Important
    Satellite 6.19.2.1 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 python3.12-pulpcore-3.85.15-5.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
  • RHSA-2026:42151 Released 2026-07-20 · Red Hat rating Important
    Satellite 6.18.7.1 Async Update
    • Red Hat Satellite 6.18 for RHEL 9 python3.12-pulpcore-3.73.30-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
  • RHSA-2026:42150 Released 2026-07-20 · Red Hat rating Important
    Satellite 6.17.9.1 Async Update
    • Red Hat Satellite 6.17 for RHEL 9 python-pulpcore-3.63.21-2.el9pc, python3.11-pulpcore-3.63.21-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
  • RHSA-2026:42142 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/gateway-rhel9, registry.redhat.io/ansible-automation-platform-27/hub-rhel9, registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9 +3
  • RHSA-2026:42079 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, automation-controller-venv-tower-4.7.14-3.el9ap, automation-gateway-proxy-2.6.17-1.el9ap +5
  • RHSA-2026:42082 Released 2026-07-20 · Red Hat rating Important
    Satellite 6.16.11 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 python-pulpcore-3.49.39-2.el8pc, python3.11-pulpcore-3.49.39-2.el8pc, yggdrasil-worker-forwarder-0.0.4-1.el8sat
    • Red Hat Satellite 6.16 for RHEL 9 python-pulpcore-3.49.39-2.el9pc, python3.11-pulpcore-3.49.39-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
  • RHSA-2026:42080 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.7 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
    • Red Hat Ansible Automation Platform 2.7 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, receptor-1.6.6-1.el9ap
  • RHSA-2026:42051 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42050 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42049 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.1 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42047 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42043 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:41930 Released 2026-07-20 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-9.el8_10
  • RHSA-2026:41036 Released 2026-07-16 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.1
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:41030 Released 2026-07-16 · Red Hat rating Important
    Multicluster Global Hub 1.4.7 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:39879 Released 2026-07-15 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-8.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-8.el9_8
  • RHSA-2026:39573 Released 2026-07-15 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2
  • RHSA-2026:39005 Released 2026-07-13 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-6.el10_2
  • RHSA-2026:38995 Released 2026-07-13 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8 +22
  • RHSA-2026:37276 Released 2026-07-09 · Red Hat rating Important
    RHTAS 1.4.2 - CLI Stack Release
    • Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.2@amd64, conforma-cli-stack-v1-4-1.4.2@amd64_darwin, conforma-cli-stack-v1-4-1.4.2@amd64_windows +4
  • RHSA-2026:36797 Released 2026-07-08 · Red Hat rating Important
    RHTAS 1.4.2 - CLI Stack Release
    • Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.2@amd64, conforma-cli-stack-v1-4-1.4.2@amd64_darwin, conforma-cli-stack-v1-4-1.4.2@amd64_windows +4
  • RHSA-2026:36648 Released 2026-07-08 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.4
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:36317 Released 2026-07-07 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-7.el9_8, skopeo-tests-2:1.22.2-7.el9_8
  • RHSA-2026:35832 Released 2026-07-06 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2.2
  • RHSA-2026:34359 Released 2026-07-01 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.152.1-1.el9_8
  • RHSA-2026:34357 Released 2026-07-01 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.152.1-1.el10_2
  • RHSA-2026:33574 Released 2026-06-30 · Red Hat rating Important
    Red Hat Developer Hub 1.9.6 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:29981 Released 2026-06-25 · Red Hat rating Moderate
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.4-1.el9_8, golang-1.26.4-1.el9_8, golang-bin-1.26.4-1.el9_8 +5
  • RHSA-2026:29980 Released 2026-06-25 · Red Hat rating Moderate
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.4-1.el10_2, golang-1.26.4-1.el10_2, golang-bin-1.26.4-1.el10_2 +5
  • RHSA-2026:23264 Released 2026-06-04 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.4-2.hum1@aarch64, golang1.26-1.26.4-2.hum1@src, golang1.26-1.26.4-2.hum1@x86_64 +10
  • RHSA-2026:23262 Released 2026-06-04 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.11-2.hum1@aarch64, golang1.25-1.25.11-2.hum1@src, golang1.25-1.25.11-2.hum1@x86_64 +10

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Deployment Validation OperatorAffectedNo fix yet
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Machine Deletion Remediation OperatorAffectedNo fix yet
Multiarch Tuning OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Multicluster Engine for Kubernetes 5AffectedNo fix yet
Network Observability OperatorAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 5AffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 6AffectedNo fix yet: Fix deferred
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:90332
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cert Manager support for Red Hat OpenShift release 1.19Fixed RHSA-2026:54531
Cluster Observability Operator 1.5Fixed RHSA-2026:61314, RHSA-2026:95081, RHSA-2026:95591
Multicluster Global Hub 1.4.9Fixed RHSA-2026:41030
Multicluster Global Hub 1.6.6Fixed RHSA-2026:44622
Multicluster Global Hub 1.7.4Fixed RHSA-2026:47149, RHSA-2026:53530
Multicluster Global Hub 1.8.2Fixed RHSA-2026:52946
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
OpenShift API for Data Protection 1.6Fixed RHSA-2026:91613
OpenShift Compliance Operator 1Fixed RHSA-2026:54500, RHSA-2026:95612
OpenShift Developer Tools and Services 1.6.4Fixed RHSA-2026:51057
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
RHEM 1.2 for RHEL 10Fixed RHSA-2026:68335
RHEM 1.2 for RHEL 9Fixed RHSA-2026:68335
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2026:60387
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:47737, RHSA-2026:60390
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:60388
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:54427
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:60391
Red Hat Advanced Cluster Management for Kubernetes 2.17Fixed RHSA-2026:60386, RHSA-2026:63016
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:50319
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:50319
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:42079
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:42079
Red Hat Ansible Automation Platform 2.7Fixed RHSA-2026:42142
Red Hat Ansible Automation Platform 2.7 for RHEL 10Fixed RHSA-2026:42080
Red Hat Ansible Automation Platform 2.7 for RHEL 9Fixed RHSA-2026:42080
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:54401
Red Hat Developer Hub 1.9Fixed RHSA-2026:33574
Red Hat Edge Manager 1.1Fixed RHSA-2026:68044
Red Hat Edge Manager 1.2Fixed RHSA-2026:68006, RHSA-2026:68254
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:29980, RHSA-2026:34357, RHSA-2026:35832, RHSA-2026:39005, RHSA-2026:39573, RHSA-2026:42946, RHSA-2026:46394, RHSA-2026:46395
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:38995, RHSA-2026:41930
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:29981, RHSA-2026:34359, RHSA-2026:36317, RHSA-2026:39879
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:87246, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:87245, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:60354, RHSA-2026:61253
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:53412, RHSA-2026:57649, RHSA-2026:60315
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:49702, RHSA-2026:49703, RHSA-2026:51187, RHSA-2026:53374, RHSA-2026:53413, RHSA-2026:54168
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:49712, RHSA-2026:53415, RHSA-2026:54401
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:87246, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:87245, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:39573
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:39879
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:51187
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:53416
Red Hat Hardened ImagesFixed RHSA-2026:23262, RHSA-2026:23264
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:54441
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:68681
Red Hat OpenShift AI 2.25Fixed RHSA-2026:42644
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91248
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91249
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:36648
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:41036
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:70645
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:60025
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:57482, RHSA-2026:57488
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:54603, RHSA-2026:66352
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:49705
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:49729
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:49744
Red Hat OpenShift Service Mesh 3.3Fixed RHSA-2026:49765
Red Hat OpenShift Service Mesh 3.4Fixed RHSA-2026:49770
Red Hat OpenShift distributed tracing 3.10.1Fixed RHSA-2026:50205
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:54757, RHSA-2026:95206
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:80684, RHSA-2026:90329
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:90332, RHSA-2026:95576
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:42082
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:42082
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:42150
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:42151
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:42240
Red Hat Trusted Artifact Signer 1.4Fixed RHSA-2026:36797, RHSA-2026:48771
Red Hat Web Terminal 1.11Fixed RHSA-2026:42043
Red Hat Web Terminal 1.12Fixed RHSA-2026:42047
Red Hat Web Terminal 1.13Fixed RHSA-2026:42050
Red Hat Web Terminal 1.14Fixed RHSA-2026:42051
Red Hat Web Terminal 1.15Fixed RHSA-2026:42049
Red Hat Web Terminal 1.16Fixed RHSA-2026:55899
Streams for Apache Kafka 3.2.1Fixed RHSA-2026:54435
external secrets operator for Red Hat OpenShift 1.1Fixed RHSA-2026:54525
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:54432, RHSA-2026:59557
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:57194, RHSA-2026:59556
multicluster engine for Kubernetes 2.17Fixed RHSA-2026:59593
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:59579
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:47735, RHSA-2026:59558
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:59559
Not affected: 107 products
  • Cert Manager support for Red Hat OpenShift release 1.19
  • Cluster Observability Operator 1.5
  • Confidential Compute Attestation
  • Cryostat 4
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • File Integrity Operator
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift
  • Logical Volume Manager Storage
  • Migration Toolkit for Applications 8
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.6.6
  • Multicluster Global Hub 1.7.4
  • Multicluster Global Hub 1.8.2
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift API for Data Protection 1.6
  • OpenShift Compliance Operator 1
  • OpenShift Developer Tools and Services
  • OpenShift Security Profiles Operator 1
  • OpenShift Serverless
  • OpenShift Service Mesh 2
  • OpenShift Service Mesh 3
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • RHEM 1.2 for RHEL 10
  • RHEM 1.2 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Management for Kubernetes 2.17
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Ansible Automation Platform 2.7
  • Red Hat Ansible Automation Platform 2.7 for RHEL 10
  • Red Hat Ansible Automation Platform 2.7 for RHEL 9
  • Red Hat Ceph Storage 7
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 9
  • Red Hat Developer Hub 1.9
  • Red Hat Edge Manager 1.1
  • Red Hat Edge Manager 1.2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift Service Mesh 3.3
  • Red Hat OpenShift Service Mesh 3.4
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3
  • Red Hat OpenShift distributed tracing 3.10.1
  • Red Hat OpenShift for Windows Containers
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Openshift Data Foundation 4
  • Red Hat Quay 3
  • Red Hat Satellite 6
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Artifact Signer 1.4
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Red Hat Web Terminal 1.16
  • Service Telemetry Framework 1.5
  • mirror registry for Red Hat OpenShift 2
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.17
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9
  • streams for Apache Kafka 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-27145
  2. 2026-10-03 Alias added: GHSA-4279-q6mj-392r
  3. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  4. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  5. 2026-10-09 Affected versions changed · Red Hat
  6. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  7. 2026-10-13 Fix available: RHSA-2026:80684 · Red Hat
  8. 2026-10-13 Fix available: Red Hat OpenStack Platform 17.1 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  11. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  12. 2026-10-15 Fix available: Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
  13. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  14. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  15. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) +1 · Red Hat
  16. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3 · Red Hat
  17. 2026-10-26 Fix available: RHSA-2026:90332 · Red Hat
  18. 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
  19. 2026-10-26 Fix available: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0 · Red Hat
  20. 2026-10-27 Affected versions changed · Red Hat
  21. 2026-10-27 Affected versions changed · Red Hat
  22. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  23. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  24. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  25. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  26. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  27. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  28. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  29. 2026-10-30 Fix available: RHSA-2026:91613 · Red Hat
  30. 2026-10-30 Fix available: OpenShift API for Data Protection 1.6, Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
  31. 2026-10-30 Affected versions changed · Red Hat
  32. 2026-10-31 Fix available: Red Hat OpenShift distributed tracing 3.10.1 · Red Hat
  33. 2026-11-03 Affected versions changed · Red Hat
  34. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  35. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4 · Red Hat
  36. 2026-11-04 Fix available: RHSA-2026:95081 · Red Hat
  37. 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
  38. 2026-11-04 Fix available: Cluster Observability Operator 1.5 · Red Hat
  39. 2026-11-06 Fix available: Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat
  40. 2026-11-06 Fix available: RHSA-2026:95591 · Red Hat
  41. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  42. 2026-11-06 Fix available: RHSA-2026:95576 · Red Hat
  43. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat

References

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences