Read the docs
TI-2026-24810 Aliases CVE-2026-32281GHSA-gjvh-7jh8-7xhm

Inefficient policy validation in crypto/x509

Priority LOW 39CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 91 fixed, 63 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00361 30th percentileScored 2026-11-07
Fix Partial crypto/x509 (Go standard library): 1.25.9, 1.26.2Red Hat: 167 advisoriesRed Hat: 91 fixed, 63 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/x509before 1.25.9; 1.26.0-0 to before 1.26.21.25.9, 1.26.2Patch availableCNA
  • crypto/x509 VendorGo standard library Affected before 1.25.9; 1.26.0-0 to before 1.26.2 Fixed in 1.25.9, 1.26.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.25.9; 1.26.0 to before 1.26.2VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.9; 1.26.0 to before 1.26.2 Vulnerable ·Go standard library

Remediation

  • Fix · CNA crypto/x509 (Go standard library) Fixed in 1.25.9, 1.26.2

Red Hat 167 advisories

  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
Show 164 more Red Hat advisories
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:77532 Released 2026-10-07 · Red Hat rating Important
    Release of components for Service Telemetry Framework 1.5.7
    • Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/sg-core-rhel9
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
  • RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
  • RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
  • RHSA-2026:67287 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.7
  • RHSA-2026:67148 Released 2026-09-14 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-3.el8_10, osbuild-composer-core-101.5-3.el8_10, osbuild-composer-worker-101.5-3.el8_10
  • RHSA-2026:67149 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.7
  • RHSA-2026:65886 Released 2026-09-09 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8.2
  • RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
  • RHSA-2026:61906 Released 2026-09-01 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) runc-4:1.2.9-3.el9_6.1
  • RHSA-2026:61907 Released 2026-09-01 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) runc-4:1.2.9-1.el9_4.2
  • RHSA-2026:61314 Released 2026-08-31 · Red Hat rating Important
    Cluster Observability Operator 1.5.2
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator +10
  • RHSA-2026:56340 Released 2026-08-18 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.2
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:54757 Released 2026-08-13 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
  • RHSA-2026:54288 Released 2026-08-12 · Red Hat rating Important
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
  • RHSA-2026:49838 Released 2026-08-04 · Red Hat rating Important
    osbuild-composer security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-4.el9_8, osbuild-composer-core-165.1-4.el9_8, osbuild-composer-worker-165.1-4.el9_8
  • RHSA-2026:49600 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.3
  • RHSA-2026:49526 Released 2026-08-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-3.el10_2.1, osbuild-composer-core-165.1-3.el10_2.1, osbuild-composer-worker-165.1-3.el10_2.1
  • RHSA-2026:49509 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-8.el9_4
  • RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
  • RHSA-2026:47712 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.25.9-1.el9_4, golang-1.25.9-1.el9_4, golang-bin-1.25.9-1.el9_4 +4
  • RHSA-2026:47716 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-8.el9_4
  • RHSA-2026:47910 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.3, osbuild-composer-core-101.3-4.el9_4.3, osbuild-composer-worker-101.3-4.el9_4.3
  • RHSA-2026:47714 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-27.el9_4, grafana-selinux-9.2.10-27.el9_4
  • RHSA-2026:47721 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.1
  • RHSA-2026:47722 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-12.el9_2
  • RHSA-2026:47719 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.25.9-1.el9_2, golang-1.25.9-1.el9_2, golang-bin-1.25.9-1.el9_2 +5
  • RHSA-2026:47952 Released 2026-07-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.12
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:46956 Released 2026-07-27 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
  • RHSA-2026:43855 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9
  • RHSA-2026:43853 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9
  • RHSA-2026:43854 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9
  • RHSA-2026:43851 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9
  • RHSA-2026:43670 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-cuda-rhel9
  • RHSA-2026:43651 Released 2026-07-22 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.5
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-rocm-rhel9
  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:42079 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, automation-controller-venv-tower-4.7.14-3.el9ap, automation-gateway-proxy-2.6.17-1.el9ap +5
  • RHSA-2026:42078 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.19-1.el8ap, ansible-test-1:2.16.19-1.el8ap, automation-controller-4.6.30-2.el8ap +24
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, ansible-test-1:2.16.19-1.el9ap, automation-controller-4.6.30-2.el9ap +24
  • RHSA-2026:42051 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42050 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42049 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.1 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42048 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.16.1 release.
    • Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42047 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42043 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:41066 Released 2026-07-16 · Red Hat rating Important
    Red Hat Quay 3.16.5
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:41019 Released 2026-07-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
  • RHSA-2026:40945 Released 2026-07-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:40118 Released 2026-07-15 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:39810 Released 2026-07-15 · Red Hat rating Important
    Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
  • RHSA-2026:36808 Released 2026-07-08 · Red Hat rating Important
    DevWorkspace Operator 0.42.0 release.
    • DevWorkspace Operator 0.42 registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9, registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:36796 Released 2026-07-08 · Red Hat rating Important
    Red Hat Edge Manager Version 1.0.3 Security Update
    • RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
  • RHSA-2026:36319 Released 2026-07-07 · Red Hat rating Important
    RHACS 4.9.9 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2026:34365 Released 2026-07-01 · Red Hat rating Important
    Satellite 6.19.2 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
  • RHSA-2026:34196 Released 2026-07-01 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) podman-4:4.9.4-20.el9_4.3, podman-docker-4:4.9.4-20.el9_4.3, podman-plugins-4:4.9.4-20.el9_4.3 +2
  • RHSA-2026:34197 Released 2026-07-01 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) skopeo-2:1.14.6-1.el9_4, skopeo-tests-2:1.14.6-1.el9_4
  • RHSA-2026:34192 Released 2026-07-01 · Red Hat rating Important
    buildah security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) buildah-2:1.33.15-1.el9_4.1, buildah-tests-2:1.33.15-1.el9_4.1
  • RHSA-2026:33722 Released 2026-06-30 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24321+617e8352.src::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.aarch64::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.ppc64le::container-tools:rhel8 +47
  • RHSA-2026:29703 Released 2026-06-25 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-3.el9_8
  • RHSA-2026:29854 Released 2026-06-25 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:29702 Released 2026-06-25 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.4.2-2.el9_8
  • RHSA-2026:29455 Released 2026-06-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.1-2.el9_8, buildah-tests-2:1.43.1-2.el9_8
  • RHSA-2026:29195 Released 2026-06-24 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-2.el10_2, buildah-tests-2:1.43.1-2.el10_2
  • RHSA-2026:29035 Released 2026-06-24 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-2.el10_2, skopeo-tests-2:1.22.2-2.el10_2
  • RHSA-2026:28441 Released 2026-06-23 · Red Hat rating Important
    Red Hat Openshift Mirror Registry v2.0.11
    • mirror registry for Red Hat OpenShift 2.0 registry.redhat.io/openshift/mirror-registry-rhel8
  • RHSA-2026:28074 Released 2026-06-23 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-6.el9_8, skopeo-tests-2:1.22.2-6.el9_8
  • RHSA-2026:28010 Released 2026-06-22 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-reports-rhel9, cryostat/cryostat-rhel9 +3
  • RHSA-2026:27740 Released 2026-06-22 · Red Hat rating Moderate
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) golang-github-openprinting-ipp-usb-0.9.27-7.el10_2.1, ipp-usb-0.9.27-7.el10_2.1
  • RHSA-2026:27711 Released 2026-06-22 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-8.el10_0, osbuild-composer-core-134.1-8.el10_0, osbuild-composer-worker-134.1-8.el10_0
  • RHSA-2026:27076 Released 2026-06-18 · Red Hat rating Important
    Satellite 6.16.9 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 dynflow-utils-1.6.3-1.1.el8sat, python-pillow-12.2.0-1.el8pc, python3.11-pillow-12.2.0-1.el8pc +1
    • Red Hat Satellite 6.16 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, python-pillow-12.2.0-1.el9pc, python3.11-pillow-12.2.0-1.el9pc +1
  • RHSA-2026:27126 Released 2026-06-18 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.10.0 release
    • Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/tempo-rhel9
  • RHSA-2026:26636 Released 2026-06-17 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2026:26585 Released 2026-06-17 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.15
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
  • RHSA-2026:26571 Released 2026-06-17 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
  • RHSA-2026:26568 Released 2026-06-17 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
  • RHSA-2026:26447 Released 2026-06-16 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-3.el9_8, podman-docker-6:5.8.2-3.el9_8, podman-plugins-6:5.8.2-3.el9_8 +2
  • RHSA-2026:26234 Released 2026-06-16 · Red Hat rating Important
    Red Hat Developer Hub 1.9.5 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:26090 Released 2026-06-15 · Red Hat rating Important
    Kiali 2.22.5 for Red Hat OpenShift Service Mesh 3.3
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:26080 Released 2026-06-15 · Red Hat rating Important
    Kiali 2.4.18 for Red Hat OpenShift Service Mesh 3.0
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:26079 Released 2026-06-15 · Red Hat rating Important
    Kiali 2.17.9 for Red Hat OpenShift Service Mesh 3.2
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:26077 Released 2026-06-15 · Red Hat rating Important
    Kiali 2.11.12 for Red Hat OpenShift Service Mesh 3.1
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:26054 Released 2026-06-15 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-8.el9_6, osbuild-composer-core-132.2-8.el9_6, osbuild-composer-worker-132.2-8.el9_6
  • RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
  • RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
  • RHSA-2026:25251 Released 2026-06-11 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.3
  • RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
  • RHSA-2026:25089 Released 2026-06-10 · Red Hat rating Important
    HawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.
    • HawtIO HawtIO 4.4.0
  • RHSA-2026:24716 Released 2026-06-09 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9-5.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9-5.el10_2
  • RHSA-2026:24503 Released 2026-06-08 · Red Hat rating Important
    Multicluster Global Hub 1.7.1 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
  • RHSA-2026:24470 Released 2026-06-08 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-3.el10_2, podman-docker-7:5.8.2-3.el10_2, podman-remote-7:5.8.2-3.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-3.el10_2
  • RHSA-2026:24482 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:24473 Released 2026-06-08 · Red Hat rating Important
    Network Observability 1.12.0 for OpenShift
    • Network Observability (NETOBSERV) 1.12.3 registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9, registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9
  • RHSA-2026:24337 Released 2026-06-08 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.4
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.4
  • RHSA-2026:23361 Released 2026-06-04 · Red Hat rating Important
    Red Hat Quay 3.9.22
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:23345 Released 2026-06-04 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:23102 Released 2026-06-04 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.26.1-2.el10_2
  • RHSA-2026:23103 Released 2026-06-04 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-4.el10_0
  • RHSA-2026:22862 Released 2026-06-03 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.4.5
    • Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
  • RHSA-2026:22840 Released 2026-06-03 · Red Hat rating Important
    Red Hat Quay 3.10.22
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:22713 Released 2026-06-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-4.el10_0
  • RHSA-2026:22629 Released 2026-06-02 · Red Hat rating Important
    Red Hat Quay 3.12.18
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:22485 Released 2026-06-02 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:22465 Released 2026-06-02 · Red Hat rating Important
    Red Hat Quay 3.17.2
    • Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:22347 Released 2026-06-01 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:22309 Released 2026-06-01 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-7.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-7.el9_8
  • RHSA-2026:22299 Released 2026-06-01 · Red Hat rating Moderate
    Red Hat OpenShift Developer Tools - Source-to-Image 1.6.2
    • OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2026:22141 Released 2026-06-01 · Red Hat rating Moderate
    go-fdo-client and go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2, go-fdo-server-1.0.1-2.el10_2, go-fdo-server-manufacturer-1.0.1-2.el10_2 +2
  • RHSA-2026:21769 Released 2026-05-28 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:21338 Released 2026-05-27 · Red Hat rating Important
    Red Hat Developer Hub 1.8.7 release.
    • Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:21017 Released 2026-05-26 · Red Hat rating Important
    Red Hat Quay 3.14.8
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:20947 Released 2026-05-26 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.20.4 security update
    • Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9 +1
  • RHSA-2026:20946 Released 2026-05-26 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.18.6 security update
    • Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/console-plugin-rhel8, registry.redhat.io/openshift-gitops-1/dex-rhel8, registry.redhat.io/openshift-gitops-1/gitops-rhel8
  • RHSA-2026:20943 Released 2026-05-26 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.4 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel8, registry.redhat.io/openshift-gitops-1/console-plugin-rhel8, registry.redhat.io/openshift-gitops-1/dex-rhel8 +1
  • RHSA-2026:20938 Released 2026-05-26 · Red Hat rating Important
    RHACS 4.9.7 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2026:20889 Released 2026-05-26 · Red Hat rating Important
    RHACS 4.10.3 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8
  • RHSA-2026:20608 Released 2026-05-26 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) containernetworking-plugins-1:1.6.2-3.el9_6.1
  • RHSA-2026:20607 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.9-1.el9_6, buildah-tests-2:1.39.9-1.el9_6
  • RHSA-2026:20609 Released 2026-05-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6.1, skopeo-tests-2:1.18.1-5.el9_6.1
  • RHSA-2026:20556 Released 2026-05-26 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-21.el9_6, grafana-selinux-10.2.6-21.el9_6
  • RHSA-2026:20571 Released 2026-05-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.2, skopeo-tests-2:1.18.1-3.el10_0.2
  • RHSA-2026:20569 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.9-1.el10_0, buildah-tests-2:1.39.9-1.el10_0
  • RHSA-2026:20570 Released 2026-05-26 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.2, podman-docker-6:5.4.0-15.el10_0.2, podman-remote-6:5.4.0-15.el10_0.2
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.2
  • RHSA-2026:20460 Released 2026-05-25 · Red Hat rating Moderate
    Kiali 2.22.4 for Red Hat OpenShift Service Mesh 3.3
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:20456 Released 2026-05-25 · Red Hat rating Moderate
    Kiali 2.4.17 for Red Hat OpenShift Service Mesh 3.0
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:20457 Released 2026-05-25 · Red Hat rating Moderate
    Kiali 2.11.11 for Red Hat OpenShift Service Mesh 3.1
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:20455 Released 2026-05-25 · Red Hat rating Moderate
    Kiali 2.17.8 for Red Hat OpenShift Service Mesh 3.2
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:20454 Released 2026-05-25 · Red Hat rating Important
    Kiali 1.73.31 for Red Hat OpenShift Service Mesh 2.6
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8
  • RHSA-2026:19839 Released 2026-05-21 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-14.el9_6
  • RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
  • RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
  • RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
  • RHSA-2026:19450 Released 2026-05-20 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-4.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-4.el10_0
  • RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
  • RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
  • RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
  • RHSA-2026:18032 Released 2026-05-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-24.el10_0, grafana-selinux-10.2.6-24.el10_0
  • RHSA-2026:18027 Released 2026-05-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-6.el10_0
  • RHSA-2026:17287 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.3, podman-docker-5:5.4.0-20.el9_6.3, podman-plugins-5:5.4.0-20.el9_6.3 +2
  • RHSA-2026:16101 Released 2026-05-11 · Red Hat rating Important
    host-metering security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-7.el7_9, host-metering-selinux-1.4.0-7.el7_9
  • RHSA-2026:16021 Released 2026-05-11 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.9-1.el9_6, golang-1.25.9-1.el9_6, golang-bin-1.25.9-1.el9_6 +5
  • RHSA-2026:16024 Released 2026-05-11 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.9-1.el10_0, golang-1.25.9-1.el10_0, golang-bin-1.25.9-1.el10_0 +5
  • RHSA-2026:13829 Released 2026-05-05 · Red Hat rating Important
    RHACS 4.10.2 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
  • RHSA-2026:13791 Released 2026-05-05 · Red Hat rating Important
    RHACS 4.9.6 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2026:10219 Released 2026-04-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.9-1.el9_7, golang-1.25.9-1.el9_7, golang-bin-1.25.9-1.el9_7 +5
  • RHSA-2026:10217 Released 2026-04-23 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.9-3.el10_1, golang-1.25.9-3.el10_1, golang-bin-1.25.9-3.el10_1 +5
  • RHSA-2026:7385 Released 2026-04-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Go standard library crypto/x509 1.25.9, 1.26.2

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-24809 Unexpected work during chain building in crypto/x509Priority MEDIUM 40
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Compliance OperatorAffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Custom Metric Autoscaler operator for Red Hat OpenshiftAffectedNo fix yet
Deployment Validation OperatorAffectedNo fix yet
External Secrets Operator for Red Hat OpenShiftAffectedNo fix planned: Will not fix
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Gatekeeper 3AffectedNo fix planned: Will not fix
Logging Subsystem for Red Hat OpenShiftAffectedNo fix yet
Machine Deletion Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 8AffectedNo fix planned: Will not fix
Migration Toolkit for ContainersAffectedNo fix yet
Multiarch Tuning OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Multicluster Global HubAffectedNo fix yet
Network Observability OperatorAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
OpenShift API for Data ProtectionAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat AMQ Broker 7AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 4AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Edge Manager 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat JBoss Web Server 6AffectedNo fix yet
Red Hat Lightspeed for Runtimes OperatorAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Red Hat Web TerminalAffectedNo fix yet
Red Hat build of Apache Camel - HawtIO 4AffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix planned: Will not fix
Security Profiles OperatorAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix yet
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix yet
cert-manager Operator for Red Hat OpenShiftAffectedNo fix yet
mirror registry for Red Hat OpenShift 2AffectedNo fix yet
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:39810
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cluster Observability Operator 1.5Fixed RHSA-2026:61314
Cryostat 4 on RHEL 9Fixed RHSA-2026:28010
Custom Metric Autoscaler 2.19Fixed RHSA-2026:26636
DevWorkspace Operator 0.42Fixed RHSA-2026:36808
HawtIO HawtIO 4.4.0Fixed RHSA-2026:25089
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:26585
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:47952
Logging Subsystem for Red Hat OpenShift 6.4Fixed RHSA-2026:22862
Logging Subsystem for Red Hat OpenShift 6.5Fixed RHSA-2026:56340
Middleware Containers for OpenshiftFixed—
Multicluster Global Hub 1.4.9Fixed RHSA-2026:22347
Multicluster Global Hub 1.5.8Fixed RHSA-2026:21769
Multicluster Global Hub 1.6.6Fixed RHSA-2026:23345
Multicluster Global Hub 1.7.4Fixed RHSA-2026:24503
Network Observability (NETOBSERV) 1.12.3Fixed RHSA-2026:24473
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:29854
OpenShift API for Data Protection 1.5Fixed RHSA-2026:26568
OpenShift Compliance Operator 1Fixed RHSA-2026:26571
OpenShift Developer Tools and Services 1.6.4Fixed RHSA-2026:22299
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2026:54288
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.0 for RHEL 9Fixed RHSA-2026:36796
RHEM 1.1 for RHEL 10Fixed RHSA-2026:41019
RHEM 1.1 for RHEL 9Fixed RHSA-2026:41019
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:13791, RHSA-2026:20938, RHSA-2026:36319
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Fixed RHSA-2026:13829, RHSA-2026:20889
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:42078
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:42078
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:42079
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:42079
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:24337
Red Hat Developer Hub 1.8Fixed RHSA-2026:21338
Red Hat Developer Hub 1.9Fixed RHSA-2026:26234
Red Hat Edge Manager 1.1Fixed RHSA-2026:40118, RHSA-2026:40945
Red Hat Enterprise Linux AI 3.3Fixed RHSA-2026:43651, RHSA-2026:43670, RHSA-2026:43851, RHSA-2026:43853, RHSA-2026:43854, RHSA-2026:43855, RHSA-2026:46956
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:10217, RHSA-2026:19135, RHSA-2026:22141, RHSA-2026:23102, RHSA-2026:24470, RHSA-2026:24716, RHSA-2026:27740, RHSA-2026:29035, RHSA-2026:29195, RHSA-2026:49526, RHSA-2026:65534
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:33722, RHSA-2026:67148
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:10219, RHSA-2026:19350, RHSA-2026:19353, RHSA-2026:22309, RHSA-2026:26447, RHSA-2026:28074, RHSA-2026:29455, RHSA-2026:29702, RHSA-2026:29703, RHSA-2026:49838, RHSA-2026:65886
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25251, RHSA-2026:25252, RHSA-2026:47719, RHSA-2026:47721, RHSA-2026:47722, RHSA-2026:48036, RHSA-2026:49600, RHSA-2026:67319
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:34192, RHSA-2026:34196, RHSA-2026:34197, RHSA-2026:47712, RHSA-2026:47714, RHSA-2026:47716, RHSA-2026:47910, RHSA-2026:49509, RHSA-2026:61907, RHSA-2026:72276
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:16024, RHSA-2026:18027, RHSA-2026:18032, RHSA-2026:19450, RHSA-2026:19719, RHSA-2026:20569, RHSA-2026:20570, RHSA-2026:20571, RHSA-2026:22713, RHSA-2026:23103, RHSA-2026:27711, RHSA-2026:67149
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:19721
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:16021, RHSA-2026:17287, RHSA-2026:19720, RHSA-2026:19839, RHSA-2026:20556, RHSA-2026:20607, RHSA-2026:20608, RHSA-2026:20609, RHSA-2026:24337, RHSA-2026:26054, RHSA-2026:61906, RHSA-2026:67287
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:24470, RHSA-2026:24716
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:22309
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:19450, RHSA-2026:20570
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:16101
Red Hat Hardened ImagesFixed RHSA-2026:7291, RHSA-2026:7385
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:22485
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat OpenShift AI 2.25Fixed RHSA-2026:42644
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91248
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91249
Red Hat OpenShift GitOps 1.18Fixed RHSA-2026:20946
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:20943
Red Hat OpenShift GitOps 1.20Fixed RHSA-2026:20947
Red Hat OpenShift Service Mesh 2.6Fixed RHSA-2026:20454
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:20456, RHSA-2026:26080
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:20457, RHSA-2026:26077
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:20455, RHSA-2026:26079
Red Hat OpenShift Service Mesh 3.3Fixed RHSA-2026:20460, RHSA-2026:26090
Red Hat OpenShift distributed tracing 3.10.1Fixed RHSA-2026:27126
Red Hat OpenStack 1.5Fixed RHSA-2026:77532
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:54757
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:39810
Red Hat Quay 3.10Fixed RHSA-2026:22840
Red Hat Quay 3.12Fixed RHSA-2026:22629
Red Hat Quay 3.14Fixed RHSA-2026:21017
Red Hat Quay 3.16Fixed RHSA-2026:41066
Red Hat Quay 3.17Fixed RHSA-2026:22465
Red Hat Quay 3.9Fixed RHSA-2026:23361
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:27076
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:27076
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:34365
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:24482
Red Hat Web Terminal 1.11Fixed RHSA-2026:42043
Red Hat Web Terminal 1.12Fixed RHSA-2026:42047
Red Hat Web Terminal 1.13Fixed RHSA-2026:42050
Red Hat Web Terminal 1.14Fixed RHSA-2026:42051
Red Hat Web Terminal 1.15Fixed RHSA-2026:42049
Red Hat Web Terminal 1.16Fixed RHSA-2026:42048
mirror registry for Red Hat OpenShift 2.0Fixed RHSA-2026:28441
Not affected: 87 products
  • Builds for Red Hat OpenShift
  • Cluster Observability Operator 1.5
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler 2.19
  • DevWorkspace Operator 0.42
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.4
  • Logging Subsystem for Red Hat OpenShift 6.5
  • Logical Volume Manager Storage
  • Migration Toolkit for Applications 8
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Multicluster Global Hub 1.7.4
  • Network Observability (NETOBSERV) 1.12.3
  • Node HealthCheck Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Compliance Operator 1
  • OpenShift File Integrity Operator - FIO 1
  • OpenShift Lightspeed
  • OpenShift Security Profiles Operator 1
  • RHEM 1.0 for RHEL 9
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat AMQ Broker 7
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Developer Hub 1.8
  • Red Hat Developer Hub 1.9
  • Red Hat Edge Manager 1.1
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift GitOps 1.18
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift GitOps 1.20
  • Red Hat OpenShift Service Mesh 2.6
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift Service Mesh 3.3
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.10.1
  • Red Hat OpenShift for Windows Containers
  • Red Hat OpenStack 1.5
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.14
  • Red Hat Quay 3.16
  • Red Hat Quay 3.17
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Service Interconnect 1
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Artifact Signer 1.3
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Red Hat Web Terminal 1.16
  • Service Telemetry Framework 1.5
  • streams for Apache Kafka 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-32281
  2. 2026-10-03 Alias added: GHSA-gjvh-7jh8-7xhm
  3. 2026-10-07 Fix available: RHSA-2026:77532 · Red Hat
  4. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  5. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1, Red Hat OpenStack 1.5 · Red Hat
  6. 2026-10-09 Affected versions changed · Red Hat
  7. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  8. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  11. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  12. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  13. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  14. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  15. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  16. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  17. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  18. 2026-10-23 Affected versions changed · Red Hat
  19. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  20. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  21. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  22. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  23. 2026-10-30 Fix available: Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
  24. 2026-10-30 Affected versions changed · Red Hat
  25. 2026-10-30 Fix available: Middleware Containers for Openshift · Red Hat
  26. 2026-10-31 Fix available: Red Hat OpenShift distributed tracing 3.10.1 · Red Hat
  27. 2026-11-04 Fix available: Cluster Observability Operator 1.5, Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
  28. 2026-11-05 Affected versions changed · Red Hat
  29. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  30. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat
  31. 2026-11-06 Fix available: Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat

References

Patch 1

Advisory 1

Other 2

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences