Unexpected work during chain building in crypto/x509
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 105 fixed, 39 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-770.
Summary
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Go standard library | crypto/x509 | before 1.25.9; 1.26.0-0 to before 1.26.2 | 1.25.9, 1.26.2 | Patch available | CNA |
- crypto/x509 VendorGo standard library Affected before 1.25.9; 1.26.0-0 to before 1.26.2 Fixed in 1.25.9, 1.26.2 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | before 1.25.9; 1.26.0 to before 1.26.2 | Vulnerable | Go standard library |
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.9; 1.26.0 to before 1.26.2 Vulnerable ·Go standard library
Remediation
- Fix · CNA crypto/x509 (Go standard library) Fixed in 1.25.9, 1.26.2
Red Hat 222 advisories
- RHSA-2026:95612 Released 2026-11-05 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
- RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
- RHSA-2026:93598 Released 2026-11-02 · Red Hat rating ImportantLVMS 4.17 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.17 registry.redhat.io/lvms4/lvms-rhel9-operator
Show 219 more Red Hat advisories
- RHSA-2026:92291 Released 2026-10-29 · Red Hat rating ImportantLVMS 4.16 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.16 registry.redhat.io/lvms4/lvms-rhel9-operator
- RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
- RHSA-2026:91249 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.5.5 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:91248 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.4.6 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
- RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
- RHSA-2026:90329 Released 2026-10-26 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security advisory
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
- RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
- RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
- RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
- RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
- RHSA-2026:88199 Released 2026-10-22 · Red Hat rating ImportantLVMS 4.12 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.12 registry.redhat.io/lvms4/lvms-rhel8-operator
- RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
- Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
- RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- RHSA-2026:84734 Released 2026-10-19 · Red Hat rating CriticalRHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:76752 Released 2026-10-06 · Red Hat rating ImportantOpenShift Security Profiles Operator bug fix and enhancement update
- OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
- RHSA-2026:74791 Released 2026-10-01 · Red Hat rating ImportantGatekeeper v3.20.1 security update
- Gatekeeper 3.20 registry.redhat.io/gatekeeper/gatekeeper-rhel9-operator
- RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
- RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
- RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
- RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
- RHSA-2026:65838 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 packages and security update
- Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-8.rhaos4.13.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el9 +14
- RHSA-2026:65840 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:65841 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 security and extras update
- Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-ansible-operator, registry.redhat.io/openshift4/ose-cluster-capacity, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8
- RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
- RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
- RHSA-2026:66401 Released 2026-09-10 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security and bug fix advisory
- Red Hat OpenStack Platform 17.1 ansible-collection-ansible-posix-1.2.0-1.4.el9ost, ansible-collections-openstack-1.9.1-17.1.20260318160829.0e9a6f2.el9ost, collectd-sensubility-0.2.1-6.el9ost +47
- RHSA-2026:65886 Released 2026-09-09 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8.2
- RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
- RHSA-2026:59830 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.12.97 packages and security update
- Red Hat OpenShift Container Platform 4.12 containernetworking-plugins-1:1.4.0-7.rhaos4.12.el8, cri-o-1.25.5-34.rhaos4.12.git6120b13.el8, cri-tools-1.25.0-6.el9 +13
- RHSA-2026:59833 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.12.97 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
- RHSA-2026:59834 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.12.97 security and extras update
- Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-ansible-operator
- RHSA-2026:60018 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.57 packages and security update
- Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el8, cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el9, cri-tools-1.30.0-9.el8 +25
- RHSA-2026:61906 Released 2026-09-01 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) runc-4:1.2.9-3.el9_6.1
- RHSA-2026:61907 Released 2026-09-01 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) runc-4:1.2.9-1.el9_4.2
- RHSA-2026:61685 Released 2026-08-31 · Red Hat rating ImportantOpenShift Virtualization v4.16 Images
- Red Hat Container Native Virtualization 4.16 registry.redhat.io/container-native-virtualization/virt-api-rhel9
- RHSA-2026:60520 Released 2026-08-27 · Red Hat rating CriticalRHOAI 3.4.4 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
- RHSA-2026:56910 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.68 packages and security update
- Red Hat OpenShift Container Platform 4.15 butane-0.20.0-6.rhaos4.15.el8, butane-redistributable-0.20.0-6.rhaos4.15.el8, containernetworking-plugins-1:1.4.0-7.rhaos4.15.el8 +18
- RHSA-2026:56852 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.16.69 packages and security update
- Red Hat OpenShift Container Platform 4.16 butane-0.21.0-6.rhaos4.16.el8, butane-redistributable-0.21.0-6.rhaos4.16.el8, containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8 +34
- RHSA-2026:57482 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.18.54 packages and security update
- Red Hat OpenShift Container Platform 4.18 butane-0.23.0-5.rhaos4.18.el8, butane-redistributable-0.23.0-5.rhaos4.18.el8, cri-o-1.31.13-11.rhaos4.18.git817a650.el9 +27
- RHSA-2026:56912 Released 2026-08-26 · Red Hat rating CriticalOpenShift Container Platform 4.15.68 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-console +5
- RHSA-2026:56855 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.16.69 security and extras update
- Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator
- RHSA-2026:56913 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.68 security and extras update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-ansible-operator
- RHSA-2026:57409 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.19.44 security and extras update
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
- RHSA-2026:57488 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.18.54 security and extras update
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
- RHSA-2026:56785 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.14.72 packages and security update
- Red Hat OpenShift Container Platform 4.14 butane-0.19.0-5.rhaos4.14.el8, butane-redistributable-0.19.0-5.rhaos4.14.el8, cri-o-1.27.8-19.rhaos4.14.gitcea2db1.el8 +13
- RHSA-2026:56789 Released 2026-08-26 · Red Hat rating CriticalOpenShift Container Platform 4.14.72 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8 +5
- RHSA-2026:54603 Released 2026-08-18 · Red Hat rating ImportantOpenShift Container Platform 4.21.29 security and extras update
- Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
- RHSA-2026:54757 Released 2026-08-13 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2 security advisory
- Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
- RHSA-2026:54191 Released 2026-08-12 · Red Hat rating Importantrhc-worker-script security update
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.11-1.el7_9
- RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
- RHSA-2026:51033 Released 2026-08-06 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Importantcontainer-tools:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
- RHSA-2026:49838 Released 2026-08-04 · Red Hat rating Importantosbuild-composer security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-4.el9_8, osbuild-composer-core-165.1-4.el9_8, osbuild-composer-worker-165.1-4.el9_8
- RHSA-2026:49600 Released 2026-08-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.3
- RHSA-2026:49526 Released 2026-08-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-3.el10_2.1, osbuild-composer-core-165.1-3.el10_2.1, osbuild-composer-worker-165.1-3.el10_2.1
- RHSA-2026:49509 Released 2026-08-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-8.el9_4
- RHSA-2026:48790 Released 2026-07-31 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-1.el8_10, osbuild-composer-core-101.5-1.el8_10, osbuild-composer-worker-101.5-1.el8_10
- RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
- RHSA-2026:47712 Released 2026-07-29 · Red Hat rating Importantgolang security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.25.9-1.el9_4, golang-1.25.9-1.el9_4, golang-bin-1.25.9-1.el9_4 +4
- RHSA-2026:47716 Released 2026-07-29 · Red Hat rating Importantgrafana-pcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-8.el9_4
- RHSA-2026:47910 Released 2026-07-29 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.3, osbuild-composer-core-101.3-4.el9_4.3, osbuild-composer-worker-101.3-4.el9_4.3
- RHSA-2026:47714 Released 2026-07-29 · Red Hat rating Importantgrafana security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-27.el9_4, grafana-selinux-9.2.10-27.el9_4
- RHSA-2026:47721 Released 2026-07-29 · Red Hat rating Importantgrafana-pcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.1
- RHSA-2026:47722 Released 2026-07-29 · Red Hat rating Importantgrafana security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-12.el9_2
- RHSA-2026:47719 Released 2026-07-29 · Red Hat rating Importantgolang security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.25.9-1.el9_2, golang-1.25.9-1.el9_2, golang-bin-1.25.9-1.el9_2 +5
- RHSA-2026:47952 Released 2026-07-29 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.2.12
- Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:42051 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.14.0 release.
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42050 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.13.0 release.
- Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42049 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.15.1 release.
- Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42047 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.12.1 release.
- Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42043 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.11.1 release.
- Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:41928 Released 2026-07-20 · Red Hat rating ImportantRed Hat Migration Toolkit for Containers
- Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
- RHSA-2026:41019 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
- RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
- RHSA-2026:40945 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
- RHSA-2026:40118 Released 2026-07-15 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
- RHSA-2026:39894 Released 2026-07-15 · Red Hat rating ImportantRelease of containers for RHOSO 18.0.21
- Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9, registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9, registry.redhat.io/rhoso-operators/sg-core-rhel9
- RHSA-2026:39810 Released 2026-07-15 · Red Hat rating ImportantRed Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
- 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- RHSA-2026:34097 Released 2026-07-09 · Red Hat rating ImportantOpenShift Container Platform 4.17.55 packages and security update
- Red Hat OpenShift Container Platform 4.17 containernetworking-plugins-1:1.4.0-9.rhaos4.17.el8, ose-aws-ecr-image-credential-provider-4.17.0-202606022046.p2.g144bace.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.17.0-202606022046.p2.g144bace.assembly.stream.el9 +22
- RHSA-2026:36796 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
- RHSA-2026:36651 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- Red Hat Edge Manager 1.0 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +9
- RHSA-2026:36625 Released 2026-07-08 · Red Hat rating ImportantRHACS 4.10.5 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:36319 Released 2026-07-07 · Red Hat rating ImportantRHACS 4.9.9 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:28961 Released 2026-07-06 · Red Hat rating ImportantOpenShift Container Platform 4.15.66 packages and security update
- Red Hat OpenShift Container Platform 4.15 containernetworking-plugins-1:1.4.0-6.rhaos4.15.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.15.0-202606040938.p2.gfd77d92.assembly.stream.el9 +8
- RHSA-2026:34365 Released 2026-07-01 · Red Hat rating ImportantSatellite 6.19.2 Async Update
- Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
- RHSA-2026:34196 Released 2026-07-01 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) podman-4:4.9.4-20.el9_4.3, podman-docker-4:4.9.4-20.el9_4.3, podman-plugins-4:4.9.4-20.el9_4.3 +2
- RHSA-2026:34197 Released 2026-07-01 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) skopeo-2:1.14.6-1.el9_4, skopeo-tests-2:1.14.6-1.el9_4
- RHSA-2026:34192 Released 2026-07-01 · Red Hat rating Importantbuildah security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) buildah-2:1.33.15-1.el9_4.1, buildah-tests-2:1.33.15-1.el9_4.1
- RHSA-2026:28886 Released 2026-07-01 · Red Hat rating ImportantOpenShift Container Platform 4.14.68 packages and security update
- Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-6.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el8, podman-3:4.4.1-25.rhaos4.14.el9 +15
- RHSA-2026:33722 Released 2026-06-30 · Red Hat rating Importantcontainer-tools:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24321+617e8352.src::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.aarch64::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.ppc64le::container-tools:rhel8 +47
- RHSA-2026:29703 Released 2026-06-25 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-3.el9_8
- RHSA-2026:29854 Released 2026-06-25 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:29702 Released 2026-06-25 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.4.2-2.el9_8
- RHSA-2026:29455 Released 2026-06-25 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.1-2.el9_8, buildah-tests-2:1.43.1-2.el9_8
- RHSA-2026:29195 Released 2026-06-24 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-2.el10_2, buildah-tests-2:1.43.1-2.el10_2
- RHSA-2026:29035 Released 2026-06-24 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-2.el10_2, skopeo-tests-2:1.22.2-2.el10_2
- RHSA-2026:28441 Released 2026-06-23 · Red Hat rating ImportantRed Hat Openshift Mirror Registry v2.0.11
- mirror registry for Red Hat OpenShift 2.0 registry.redhat.io/openshift/mirror-registry-rhel8
- RHSA-2026:28198 Released 2026-06-23 · Red Hat rating ImportantAssisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12
- multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-rhel8 +1
- RHSA-2026:28196 Released 2026-06-23 · Red Hat rating ImportantAssisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12
- multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
- RHSA-2026:28074 Released 2026-06-23 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-6.el9_8, skopeo-tests-2:1.22.2-6.el9_8
- RHSA-2026:28047 Released 2026-06-22 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 (etcd) security update
- Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
- RHSA-2026:28046 Released 2026-06-22 · Red Hat rating ModerateRed Hat OpenStack Platform 17.1 (golang-uber-multierr) security update
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-7.el9ost, golang-uber-multierr-1.5.0-2.el9ost
- RHSA-2026:28038 Released 2026-06-22 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gvisor-tap-vsock-6:0.8.5-2.el9_6.2, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.2
- RHSA-2026:27076 Released 2026-06-18 · Red Hat rating ImportantSatellite 6.16.9 Async Update
- Red Hat Satellite 6.16 for RHEL 8 dynflow-utils-1.6.3-1.1.el8sat, python-pillow-12.2.0-1.el8pc, python3.11-pillow-12.2.0-1.el8pc +1
- Red Hat Satellite 6.16 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, python-pillow-12.2.0-1.el9pc, python3.11-pillow-12.2.0-1.el9pc +1
- RHSA-2026:26636 Released 2026-06-17 · Red Hat rating ImportantCustom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
- Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
- RHSA-2026:26585 Released 2026-06-17 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.0.15
- Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
- RHSA-2026:26571 Released 2026-06-17 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
- RHSA-2026:26568 Released 2026-06-17 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
- RHSA-2026:25180 Released 2026-06-17 · Red Hat rating ImportantOpenShift Container Platform 4.18.44 packages and security update
- Red Hat OpenShift Container Platform 4.18 ose-aws-ecr-image-credential-provider-4.18.0-202606021914.p2.gc395190.assembly.stream.el8, ose-aws-ecr-image-credential-provider-4.18.0-202606021914.p2.gc395190.assembly.stream.el9, ose-azure-acr-image-credential-provider-4.18.0-202606021914.p2.g9c24d76.assembly.stream.el8 +3
- RHSA-2026:26447 Released 2026-06-16 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-3.el9_8, podman-docker-6:5.8.2-3.el9_8, podman-plugins-6:5.8.2-3.el9_8 +2
- RHSA-2026:25253 Released 2026-06-11 · Red Hat rating Importantrunc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) runc-4:1.2.9-1.el9_2.2
- RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
- RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
- RHSA-2026:25251 Released 2026-06-11 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.3
- RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
- RHSA-2026:25127 Released 2026-06-10 · Red Hat rating ImportantSubmariner v0.21 security fixes and container updates
- Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
- RHSA-2026:25089 Released 2026-06-10 · Red Hat rating ImportantHawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.
- HawtIO HawtIO 4.4.0
- RHSA-2026:23244 Released 2026-06-10 · Red Hat rating ImportantOpenShift Container Platform 4.19.33 packages and security update
- Red Hat OpenShift Container Platform 4.19 runc-4:1.2.5-6.rhaos4.19.el9, skopeo-2:1.18.1-6.rhaos4.19.el9, skopeo-tests-2:1.18.1-6.rhaos4.19.el9
- RHSA-2026:24977 Released 2026-06-10 · Red Hat rating ImportantRHOAI 2.25.7 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +34
- RHSA-2026:24853 Released 2026-06-09 · Red Hat rating ImportantRed Hat Quay 3.15.5
- Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:24761 Released 2026-06-09 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.29-2.el8ap, automation-gateway-proxy-server-2.5.10-6.el8ap, automation-gateway-server-2.5.20260422-3.el8ap +4
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.29-2.el9ap, automation-gateway-proxy-server-2.6.14-3.el9ap, automation-gateway-server-2.5.20260422-3.el9ap +4
- RHSA-2026:24762 Released 2026-06-09 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 python3-click-8.3.3-1.el10ap, receptor-1.6.5-1.el10ap, receptorctl-1.6.5-1.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.12-1.el9ap, automation-controller-cli-4.7.12-1.el9ap, automation-controller-server-4.7.12-1.el9ap +10
- RHSA-2026:24716 Released 2026-06-09 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9-5.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9-5.el10_2
- RHSA-2026:24470 Released 2026-06-08 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-3.el10_2, podman-docker-7:5.8.2-3.el10_2, podman-remote-7:5.8.2-3.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-3.el10_2
- RHSA-2026:24478 Released 2026-06-08 · Red Hat rating ImportantRHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
- RHSA-2026:24359 Released 2026-06-08 · Red Hat rating ImportantRed Hat OpenShift Builds 1.7.3
- Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
- RHSA-2026:24337 Released 2026-06-08 · Red Hat rating Importantrhc security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.4
- Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.4
- RHSA-2026:23361 Released 2026-06-04 · Red Hat rating ImportantRed Hat Quay 3.9.22
- Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:23345 Released 2026-06-04 · Red Hat rating ImportantMulticluster Global Hub 1.6.2 security update
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:23102 Released 2026-06-04 · Red Hat rating Importantdelve security update
- Red Hat Enterprise Linux AppStream (v. 10) delve-1.26.1-2.el10_2
- RHSA-2026:23103 Released 2026-06-04 · Red Hat rating Importantdelve security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-4.el10_0
- RHSA-2026:22962 Released 2026-06-03 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.13.0 release.
- Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:22961 Released 2026-06-03 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.15.0 release.
- Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:22960 Released 2026-06-03 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.11.1 release.
- Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:22959 Released 2026-06-03 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.14.0 release.
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:22958 Released 2026-06-03 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.12.1 release.
- Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:22862 Released 2026-06-03 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.4.5
- Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
- RHSA-2026:21655 Released 2026-06-03 · Red Hat rating ImportantOpenShift Container Platform 4.18.43 packages and security update
- Red Hat OpenShift Container Platform 4.18 containernetworking-plugins-1:1.4.0-9.rhaos4.18.el8, podman-5:5.2.2-12.rhaos4.18.el8, podman-5:5.2.2-20.rhaos4.18.el9 +16
- RHSA-2026:22840 Released 2026-06-03 · Red Hat rating ImportantRed Hat Quay 3.10.22
- Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:22713 Released 2026-06-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-4.el10_0
- RHSA-2026:22709 Released 2026-06-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-7.el9_6, osbuild-composer-core-132.2-7.el9_6, osbuild-composer-worker-132.2-7.el9_6
- RHSA-2026:22485 Released 2026-06-02 · Red Hat rating ImportantRed Hat Lightspeed (formerly Insights) for Runtimes security update
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
- RHSA-2026:22465 Released 2026-06-02 · Red Hat rating ImportantRed Hat Quay 3.17.2
- Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
- RHSA-2026:22422 Released 2026-06-02 · Red Hat rating ImportantAssisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3
- multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
- RHSA-2026:22415 Released 2026-06-02 · Red Hat rating ImportantAssisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.17.0
- multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
- RHSA-2026:22347 Released 2026-06-01 · Red Hat rating ImportantMulticluster Global Hub 1.4.5 security update
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:22309 Released 2026-06-01 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-7.el9_8
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-7.el9_8
- RHSA-2026:22268 Released 2026-06-01 · Red Hat rating ImportantAssisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.11.2
- multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
- RHSA-2026:22260 Released 2026-06-01 · Red Hat rating ImportantAssisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.7
- multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
- RHSA-2026:22258 Released 2026-06-01 · Red Hat rating ImportantAssisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.7
- multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-service-8-rhel8
- RHSA-2026:22141 Released 2026-06-01 · Red Hat rating Moderatego-fdo-client and go-fdo-server security update
- Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2, go-fdo-server-1.0.1-2.el10_2, go-fdo-server-manufacturer-1.0.1-2.el10_2 +2
- RHSA-2026:22130 Released 2026-06-01 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-5.el10_2
- RHSA-2026:21772 Released 2026-05-28 · Red Hat rating ImportantRed Hat OpenShift Dev Spaces 3.28.0 Release.
- Red Hat OpenShift Dev Spaces 3.28 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/openvsx-rhel9 +3
- RHSA-2026:21769 Released 2026-05-28 · Red Hat rating ImportantMulticluster Global Hub 1.5.4 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:21338 Released 2026-05-27 · Red Hat rating ImportantRed Hat Developer Hub 1.8.7 release.
- Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:21017 Released 2026-05-26 · Red Hat rating ImportantRed Hat Quay 3.14.8
- Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:20889 Released 2026-05-26 · Red Hat rating ImportantRHACS 4.10.3 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8
- RHSA-2026:20608 Released 2026-05-26 · Red Hat rating Importantcontainernetworking-plugins security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) containernetworking-plugins-1:1.6.2-3.el9_6.1
- RHSA-2026:20607 Released 2026-05-26 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.9-1.el9_6, buildah-tests-2:1.39.9-1.el9_6
- RHSA-2026:20609 Released 2026-05-26 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6.1, skopeo-tests-2:1.18.1-5.el9_6.1
- RHSA-2026:20556 Released 2026-05-26 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-21.el9_6, grafana-selinux-10.2.6-21.el9_6
- RHSA-2026:20571 Released 2026-05-26 · Red Hat rating Importantskopeo security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.2, skopeo-tests-2:1.18.1-3.el10_0.2
- RHSA-2026:20569 Released 2026-05-26 · Red Hat rating Importantbuildah security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.9-1.el10_0, buildah-tests-2:1.39.9-1.el10_0
- RHSA-2026:20570 Released 2026-05-26 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.2, podman-docker-6:5.4.0-15.el10_0.2, podman-remote-6:5.4.0-15.el10_0.2
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.2
- RHSA-2026:19839 Released 2026-05-21 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-14.el9_6
- RHSA-2026:19750 Released 2026-05-20 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-7.el10_0, osbuild-composer-core-134.1-7.el10_0, osbuild-composer-worker-134.1-7.el10_0
- RHSA-2026:19722 Released 2026-05-20 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.4
- RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
- RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
- RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
- RHSA-2026:19715 Released 2026-05-20 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.4
- RHSA-2026:19714 Released 2026-05-20 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-5.el10_0
- RHSA-2026:19634 Released 2026-05-20 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
- RHSA-2026:19550 Released 2026-05-20 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0.4, ipp-usb-0.9.27-3.el10_0.4
- RHSA-2026:19450 Released 2026-05-20 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-4.el10_0
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-4.el10_0
- RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
- RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
- RHSA-2026:19375 Released 2026-05-19 · Red Hat rating ImportantRed Hat Quay 3.16.4
- Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
- RHSA-2026:19133 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-4.el10_2
- RHSA-2026:19144 Released 2026-05-19 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2
- RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
- RHSA-2026:18032 Released 2026-05-18 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-24.el10_0, grafana-selinux-10.2.6-24.el10_0
- RHSA-2026:18027 Released 2026-05-18 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-6.el10_0
- RHSA-2026:17287 Released 2026-05-13 · Red Hat rating Importantpodman security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.3, podman-docker-5:5.4.0-20.el9_6.3, podman-plugins-5:5.4.0-20.el9_6.3 +2
- RHSA-2026:17084 Released 2026-05-13 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gvisor-tap-vsock-6:0.8.5-2.el10_0.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0.1
- RHSA-2026:16875 Released 2026-05-13 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-10.el8_10
- RHSA-2026:16874 Released 2026-05-13 · Red Hat rating ImportantNetwork Observability 1.11.2 for OpenShift
- Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +1
- RHSA-2026:16542 Released 2026-05-12 · Red Hat rating ImportantKiali 2.22.3 for Red Hat OpenShift Service Mesh 3.3
- Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:16537 Released 2026-05-12 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.3.3
- Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:16535 Released 2026-05-12 · Red Hat rating ImportantKiali 2.17.7 for Red Hat OpenShift Service Mesh 3.2
- Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:16534 Released 2026-05-12 · Red Hat rating ImportantKiali 2.4.16 for Red Hat OpenShift Service Mesh 3.0
- Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:16532 Released 2026-05-12 · Red Hat rating ImportantKiali 2.11.10 for Red Hat OpenShift Service Mesh 3.1
- Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
- RHSA-2026:16508 Released 2026-05-12 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.2.5
- Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:16505 Released 2026-05-12 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.1.8
- Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:16477 Released 2026-05-12 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.0.11
- Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:16476 Released 2026-05-12 · Red Hat rating ImportantKiali 1.73.30 for Red Hat OpenShift Service Mesh 2.6
- Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8
- RHSA-2026:16101 Released 2026-05-11 · Red Hat rating Importanthost-metering security update
- Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-7.el7_9, host-metering-selinux-1.4.0-7.el7_9
- RHSA-2026:16021 Released 2026-05-11 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.9-1.el9_6, golang-1.25.9-1.el9_6, golang-bin-1.25.9-1.el9_6 +5
- RHSA-2026:16024 Released 2026-05-11 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.9-1.el10_0, golang-1.25.9-1.el10_0, golang-bin-1.25.9-1.el10_0 +5
- RHSA-2026:15980 Released 2026-05-11 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-7.el8_10
- RHSA-2026:14391 Released 2026-05-06 · Red Hat rating ImportantRed Hat build of Cryostat security update
- Cryostat 4 on RHEL 9 cryostat/cryostat-storage-rhel9
- RHSA-2026:14200 Released 2026-05-06 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-8.el9_7.1
- RHSA-2026:14162 Released 2026-05-06 · Red Hat rating ImportantRed Hat build of OpenTelemetry 3.9.3 release
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9
- RHSA-2026:14020 Released 2026-05-06 · Red Hat rating ImportantRelease of components for Service Telemetry Framework 1.5.7
- Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/service-telemetry-rhel9-operator, registry.redhat.io/stf/sg-core-rhel9 +1
- RHSA-2026:13829 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.10.2 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
- RHSA-2026:13826 Released 2026-05-05 · Red Hat rating CriticalRed Hat Developer Hub 1.9.4 release.
- Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:13791 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.9.6 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:13545 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9 +11
- RHSA-2026:11688 Released 2026-04-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 2.6.15
- Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/istio-rhel8-operator, registry.redhat.io/openshift-service-mesh/pilot-rhel8 +1
- RHSA-2026:11514 Released 2026-04-29 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-14.el8_10
- RHSA-2026:11507 Released 2026-04-29 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-30.el8_10, grafana-selinux-9.2.10-30.el8_10
- RHSA-2026:10704 Released 2026-04-27 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
- RHSA-2026:10219 Released 2026-04-24 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.9-1.el9_7, golang-1.25.9-1.el9_7, golang-bin-1.25.9-1.el9_7 +5
- RHSA-2026:10217 Released 2026-04-23 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.9-3.el10_1, golang-1.25.9-3.el10_1, golang-bin-1.25.9-3.el10_1 +5
- RHSA-2026:9385 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Go standard library crypto/x509 1.25.9, 1.26.2
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-24810 Inefficient policy validation in crypto/x509Priority LOW 39
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Affected | No fix yet |
| Confidential Compute Attestation | Affected | No fix planned: Will not fix |
| Deployment Validation Operator | Affected | No fix yet |
| External Secrets Operator for Red Hat OpenShift | Affected | No fix planned: Will not fix |
| ExternalDNS Operator | Affected | No fix yet |
| Fence Agents Remediation Operator | Affected | No fix yet |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet |
| Logical Volume Manager Storage | Affected | No fix yet |
| Machine Deletion Remediation Operator | Affected | No fix yet |
| Multicluster Engine for Kubernetes | Affected | No fix yet |
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| Red Hat 3scale API Management Platform 2 | Affected | No fix yet |
| Red Hat AI Inference Server | Affected | No fix planned: Will not fix |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Connectivity Link 1 | Affected | No fix yet |
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 7 | Affected | No fix yet |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift Cluster Manager CLI | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Red Hat OpenShift Dev Workspaces Operator | Affected | No fix yet |
| Red Hat OpenShift GitOps | Affected | No fix yet |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat OpenShift on AWS | Affected | No fix yet |
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet |
| Red Hat Openshift Data Foundation 4 | Affected | No fix yet |
| Red Hat Satellite 6 | Affected | No fix yet |
| Red Hat Trusted Artifact Signer | Affected | No fix yet |
| Zero Trust Workload Identity Manager | Affected | No fix yet |
| Zero Trust Workload Identity Manager - Tech Preview | Affected | No fix planned: Will not fix |
| mirror registry for Red Hat OpenShift | Affected | No fix yet |
| 9Base-RHOSO-TOOLS-18 | Fixed | RHSA-2026:39810 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372 |
| Cryostat 4 on RHEL 9 | Fixed | RHSA-2026:14391 |
| Custom Metric Autoscaler 2.19 | Fixed | RHSA-2026:26636 |
| Gatekeeper 3.20 | Fixed | RHSA-2026:74791 |
| HawtIO HawtIO 4.4.0 | Fixed | RHSA-2026:25089 |
| Logging Subsystem for Red Hat OpenShift 6.0 | Fixed | RHSA-2026:26585 |
| Logging Subsystem for Red Hat OpenShift 6.2 | Fixed | RHSA-2026:47952 |
| Logging Subsystem for Red Hat OpenShift 6.4 | Fixed | RHSA-2026:22862 |
| Logical Volume Manager Storage 4.12 | Fixed | RHSA-2026:88199 |
| Logical Volume Manager Storage 4.16 | Fixed | RHSA-2026:92291 |
| Logical Volume Manager Storage 4.17 | Fixed | RHSA-2026:93598 |
| Multicluster Global Hub 1.4.9 | Fixed | RHSA-2026:22347 |
| Multicluster Global Hub 1.5.8 | Fixed | RHSA-2026:21769 |
| Multicluster Global Hub 1.6.6 | Fixed | RHSA-2026:23345 |
| Network Observability (NETOBSERV) 1.11.0 | Fixed | RHSA-2026:16874 |
| OpenShift API for Data Protection 1.3 | Fixed | RHSA-2026:51033 |
| OpenShift API for Data Protection 1.4 | Fixed | RHSA-2026:29854 |
| OpenShift API for Data Protection 1.5 | Fixed | RHSA-2026:26568 |
| OpenShift Compliance Operator 1 | Fixed | RHSA-2026:26571, RHSA-2026:95612 |
| OpenShift Security Profiles Operator 1 | Fixed | RHSA-2026:76752 |
| RHEM 1.0 for RHEL 9 | Fixed | RHSA-2026:36796 |
| RHEM 1.1 for RHEL 10 | Fixed | RHSA-2026:41019 |
| RHEM 1.1 for RHEL 9 | Fixed | RHSA-2026:41019 |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 | Fixed | RHSA-2026:25127 |
| Red Hat Advanced Cluster Security 4.9 | Fixed | RHSA-2026:13791, RHSA-2026:36319 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 | Fixed | RHSA-2026:13829, RHSA-2026:20889, RHSA-2026:36625 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:24761 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:24761 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:13545 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Fixed | RHSA-2026:24762 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:24762 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:24337 |
| Red Hat Container Native Virtualization 4.16 | Fixed | RHSA-2026:61685 |
| Red Hat Developer Hub 1.8 | Fixed | RHSA-2026:21338 |
| Red Hat Developer Hub 1.9 | Fixed | RHSA-2026:13826 |
| Red Hat Edge Manager 1.0 | Fixed | RHSA-2026:36651 |
| Red Hat Edge Manager 1.1 | Fixed | RHSA-2026:40118, RHSA-2026:40945 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:10217, RHSA-2026:19133, RHSA-2026:19135, RHSA-2026:19144, RHSA-2026:22130, RHSA-2026:22141, RHSA-2026:23102, RHSA-2026:24470, RHSA-2026:24716, RHSA-2026:29035, RHSA-2026:29195, RHSA-2026:49526, RHSA-2026:65534 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:10704, RHSA-2026:11507, RHSA-2026:11514, RHSA-2026:15980, RHSA-2026:16875, RHSA-2026:33722, RHSA-2026:48790 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:10219, RHSA-2026:14200, RHSA-2026:19350, RHSA-2026:19353, RHSA-2026:22309, RHSA-2026:26447, RHSA-2026:28074, RHSA-2026:29455, RHSA-2026:29702, RHSA-2026:29703, RHSA-2026:49838, RHSA-2026:65886 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:19634, RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2026:19634 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25251, RHSA-2026:25252, RHSA-2026:25253, RHSA-2026:47719, RHSA-2026:47721, RHSA-2026:47722, RHSA-2026:48036, RHSA-2026:49600, RHSA-2026:67319 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:34192, RHSA-2026:34196, RHSA-2026:34197, RHSA-2026:47712, RHSA-2026:47714, RHSA-2026:47716, RHSA-2026:47910, RHSA-2026:49509, RHSA-2026:61907, RHSA-2026:72276 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:16024, RHSA-2026:17084, RHSA-2026:18027, RHSA-2026:18032, RHSA-2026:19450, RHSA-2026:19550, RHSA-2026:19714, RHSA-2026:19715, RHSA-2026:19719, RHSA-2026:19750, RHSA-2026:20569, RHSA-2026:20570, RHSA-2026:20571, RHSA-2026:22713, RHSA-2026:23103 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:19721 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:16021, RHSA-2026:17287, RHSA-2026:19720, RHSA-2026:19722, RHSA-2026:19839, RHSA-2026:20556, RHSA-2026:20607, RHSA-2026:20608, RHSA-2026:20609, RHSA-2026:22709, RHSA-2026:24337, RHSA-2026:28038, RHSA-2026:61906 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2026:19634 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:24470, RHSA-2026:24716 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:22309 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:19450, RHSA-2026:20570 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:16101, RHSA-2026:54191 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 | Fixed | RHSA-2026:22485 |
| Red Hat Migration Toolkit 1.8 | Fixed | RHSA-2026:41928 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:24977 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:60520, RHSA-2026:84734, RHSA-2026:91248 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:91249 |
| Red Hat OpenShift Builds 1.7.3 | Fixed | RHSA-2026:24359 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:59830, RHSA-2026:59833, RHSA-2026:59834 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:65838, RHSA-2026:65840, RHSA-2026:65841 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:28886, RHSA-2026:56785, RHSA-2026:56789 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:28961, RHSA-2026:56910, RHSA-2026:56912, RHSA-2026:56913 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:56852, RHSA-2026:56855 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:34097, RHSA-2026:60018 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:21655, RHSA-2026:25180, RHSA-2026:57482, RHSA-2026:57488 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:23244, RHSA-2026:57409 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:54603 |
| Red Hat OpenShift Dev Spaces 3.28 | Fixed | RHSA-2026:21772 |
| Red Hat OpenShift Service Mesh 2.6 | Fixed | RHSA-2026:11688, RHSA-2026:16476 |
| Red Hat OpenShift Service Mesh 3.0 | Fixed | RHSA-2026:16477, RHSA-2026:16534 |
| Red Hat OpenShift Service Mesh 3.1 | Fixed | RHSA-2026:16505, RHSA-2026:16532 |
| Red Hat OpenShift Service Mesh 3.2 | Fixed | RHSA-2026:16508, RHSA-2026:16535 |
| Red Hat OpenShift Service Mesh 3.3 | Fixed | RHSA-2026:16537, RHSA-2026:16542 |
| Red Hat OpenShift distributed tracing 3.9.3 | Fixed | RHSA-2026:14162, RHSA-2026:9385 |
| Red Hat OpenStack 1.5 | Fixed | RHSA-2026:14020 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2026:54757 |
| Red Hat OpenStack Platform 17.1 | Fixed | RHSA-2026:28046, RHSA-2026:28047, RHSA-2026:66401, RHSA-2026:90329 |
| Red Hat OpenStack Services on OpenShift 18.0 | Fixed | RHSA-2026:39810, RHSA-2026:39894 |
| Red Hat Quay 3.10 | Fixed | RHSA-2026:22840 |
| Red Hat Quay 3.14 | Fixed | RHSA-2026:21017 |
| Red Hat Quay 3.15 | Fixed | RHSA-2026:24853 |
| Red Hat Quay 3.16 | Fixed | RHSA-2026:19375 |
| Red Hat Quay 3.17 | Fixed | RHSA-2026:22465 |
| Red Hat Quay 3.9 | Fixed | RHSA-2026:23361 |
| Red Hat Satellite 6.16 for RHEL 8 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.16 for RHEL 9 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.19 for RHEL 9 | Fixed | RHSA-2026:34365 |
| Red Hat Trusted Artifact Signer 1.3 | Fixed | RHSA-2026:24478 |
| Red Hat Web Terminal 1.11 | Fixed | RHSA-2026:22960, RHSA-2026:42043 |
| Red Hat Web Terminal 1.12 | Fixed | RHSA-2026:22958, RHSA-2026:42047 |
| Red Hat Web Terminal 1.13 | Fixed | RHSA-2026:22962, RHSA-2026:42050 |
| Red Hat Web Terminal 1.14 | Fixed | RHSA-2026:22959, RHSA-2026:42051 |
| Red Hat Web Terminal 1.15 | Fixed | RHSA-2026:22961, RHSA-2026:42049 |
| mirror registry for Red Hat OpenShift 2.0 | Fixed | RHSA-2026:28441 |
| multicluster engine for Kubernetes 2.10 | Fixed | RHSA-2026:22422 |
| multicluster engine for Kubernetes 2.11 | Fixed | RHSA-2026:22268 |
| multicluster engine for Kubernetes 2.17 | Fixed | RHSA-2026:22415 |
| multicluster engine for Kubernetes 2.6 | Fixed | RHSA-2026:28196, RHSA-2026:28198 |
| multicluster engine for Kubernetes 2.8 | Fixed | RHSA-2026:22258, RHSA-2026:22260 |
Not affected: 100 products
- Cryostat 4 on RHEL 9
- Custom Metric Autoscaler 2.19
- ExternalDNS Operator
- File Integrity Operator
- Gatekeeper 3.20
- Logging Subsystem for Red Hat OpenShift 6.0
- Logging Subsystem for Red Hat OpenShift 6.2
- Logging Subsystem for Red Hat OpenShift 6.4
- Logical Volume Manager Storage 4.12
- Logical Volume Manager Storage 4.16
- Logical Volume Manager Storage 4.17
- Migration Toolkit for Applications 8
- Multicluster Global Hub 1.4.9
- Multicluster Global Hub 1.5.8
- Multicluster Global Hub 1.6.6
- Network Observability (NETOBSERV) 1.11.0
- Node HealthCheck Operator
- OpenShift API for Data Protection 1.3
- OpenShift API for Data Protection 1.4
- OpenShift API for Data Protection 1.5
- OpenShift Compliance Operator 1
- OpenShift Security Profiles Operator 1
- OpenShift Service Mesh 2
- OpenShift Service Mesh 3
- Power monitoring for Red Hat OpenShift
- RHEM 1.0 for RHEL 9
- RHEM 1.1 for RHEL 10
- RHEM 1.1 for RHEL 9
- Red Hat Advanced Cluster Management for Kubernetes 2.14
- Red Hat Advanced Cluster Security 4.9
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Container Native Virtualization 4.16
- Red Hat Developer Hub 1.8
- Red Hat Developer Hub 1.9
- Red Hat Edge Manager 1.0
- Red Hat Edge Manager 1.1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Enterprise Linux AppStream (v. 8)
- Red Hat Hardened Images
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
- Red Hat Migration Toolkit 1.8
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.4
- Red Hat OpenShift Builds 1.7.3
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.21
- Red Hat OpenShift Container Platform 5
- Red Hat OpenShift Dev Spaces 3.28
- Red Hat OpenShift Service Mesh 2.6
- Red Hat OpenShift Service Mesh 3.0
- Red Hat OpenShift Service Mesh 3.1
- Red Hat OpenShift Service Mesh 3.2
- Red Hat OpenShift Service Mesh 3.3
- Red Hat OpenShift distributed tracing 3.9.3
- Red Hat OpenShift for Windows Containers
- Red Hat OpenStack 1.5
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat OpenStack Services on OpenShift 18.0
- Red Hat Quay 3
- Red Hat Quay 3.10
- Red Hat Quay 3.14
- Red Hat Quay 3.15
- Red Hat Quay 3.16
- Red Hat Quay 3.17
- Red Hat Quay 3.9
- Red Hat Satellite 6.16 for RHEL 8
- Red Hat Satellite 6.16 for RHEL 9
- Red Hat Satellite 6.19 for RHEL 9
- Red Hat Service Interconnect 1
- Red Hat Service Interconnect 2
- Red Hat Web Terminal 1.11
- Red Hat Web Terminal 1.12
- Red Hat Web Terminal 1.13
- Red Hat Web Terminal 1.14
- Red Hat Web Terminal 1.15
- multicluster engine for Kubernetes 2.10
- multicluster engine for Kubernetes 2.11
- multicluster engine for Kubernetes 2.17
- multicluster engine for Kubernetes 2.6
- multicluster engine for Kubernetes 2.8
- streams for Apache Kafka 3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-32280
- 2026-10-03 Alias added: GHSA-m4pr-4j3g-9v7v
- 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
- 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
- 2026-10-18 Affected versions changed · Red Hat
- 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
- 2026-10-20 Affected versions changed · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88199 · Red Hat
- 2026-10-23 Fix available: Logical Volume Manager Storage 4.12 · Red Hat
- 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
- 2026-10-26 Affected versions changed · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-28 Affected versions changed · Red Hat
- 2026-10-28 Affected versions changed · Red Hat
- 2026-10-28 Affected versions changed · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
- 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
- 2026-10-29 Affected versions changed · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92291 · Red Hat
- 2026-10-30 Fix available: Logical Volume Manager Storage 4.16, Red Hat OpenShift AI 3.5 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-11-01 Affected versions changed · Red Hat
- 2026-11-01 Affected versions changed · Red Hat
- 2026-11-03 Fix available: RHSA-2026:93598 · Red Hat
- 2026-11-03 Fix available: Logical Volume Manager Storage 4.17 · Red Hat
- 2026-11-03 Affected versions changed · Red Hat
- 2026-11-04 Affected versions changed · Red Hat
- 2026-11-04 Affected versions changed · Red Hat
- 2026-11-04 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
- 2026-11-05 EPSS moved to the 50th–90th percentile
- 2026-11-05 Affected versions changed · Red Hat
- 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
References
More Go standard library Go vulnerabilities
- TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
- TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
- TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
- TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-32280 · CVE Program
- CVE-2026-32280 · NVD
- FIRST EPSS
- GHSA-m4pr-4j3g-9v7v · GitHub Advisory Database · CC BY 4.0
- CVE-2026-32280 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences