TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 86 fixed, 65 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Go standard library | internal/syscall/unix | before 1.25.9; 1.26.0-0 to before 1.26.2 | 1.25.9, 1.26.2 | Patch available | CNA |
- internal/syscall/unix VendorGo standard library Affected before 1.25.9; 1.26.0-0 to before 1.26.2 Fixed in 1.25.9, 1.26.2 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | before 1.25.9; 1.26.0 to before 1.26.2 | Vulnerable | Go standard library |
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.9; 1.26.0 to before 1.26.2 Vulnerable ·Go standard library
Remediation
- Fix · CNA internal/syscall/unix (Go standard library) Fixed in 1.25.9, 1.26.2
Red Hat 154 advisories
- RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
- RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
- RHSA-2026:91249 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.5.5 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
Show 151 more Red Hat advisories
- RHSA-2026:91248 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.4.6 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
- RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
- RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
- RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
- RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
- RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
- RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
- Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
- RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- RHSA-2026:76752 Released 2026-10-06 · Red Hat rating ImportantOpenShift Security Profiles Operator bug fix and enhancement update
- OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
- RHSA-2026:73419 Released 2026-09-29 · Red Hat rating ImportantMulticluster Global Hub 1.6.6 security update
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
- RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
- RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
- RHSA-2026:71597 Released 2026-09-24 · Red Hat rating ImportantMulticluster Global Hub 1.5.8 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
- RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
- RHSA-2026:67842 Released 2026-09-16 · Red Hat rating ImportantMulticluster Global Hub 1.7.3 security update
- Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:67516 Released 2026-09-15 · Red Hat rating ImportantMulticluster Global Hub 1.4.9 security update
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
- RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
- RHSA-2026:66401 Released 2026-09-10 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security and bug fix advisory
- Red Hat OpenStack Platform 17.1 ansible-collection-ansible-posix-1.2.0-1.4.el9ost, ansible-collections-openstack-1.9.1-17.1.20260318160829.0e9a6f2.el9ost, collectd-sensubility-0.2.1-6.el9ost +47
- RHSA-2026:56340 Released 2026-08-18 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.5.2
- Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:54757 Released 2026-08-13 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2 security advisory
- Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
- RHSA-2026:54288 Released 2026-08-12 · Red Hat rating ImportantOpenShift File Integrity Operator bug fix and enhancement update
- OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
- RHSA-2026:54191 Released 2026-08-12 · Red Hat rating Importantrhc-worker-script security update
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.11-1.el7_9
- RHSA-2026:51033 Released 2026-08-06 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:49600 Released 2026-08-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.3
- RHSA-2026:49509 Released 2026-08-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-8.el9_4
- RHSA-2026:48790 Released 2026-07-31 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-1.el8_10, osbuild-composer-core-101.5-1.el8_10, osbuild-composer-worker-101.5-1.el8_10
- RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
- RHSA-2026:47712 Released 2026-07-29 · Red Hat rating Importantgolang security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.25.9-1.el9_4, golang-1.25.9-1.el9_4, golang-bin-1.25.9-1.el9_4 +4
- RHSA-2026:47716 Released 2026-07-29 · Red Hat rating Importantgrafana-pcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-8.el9_4
- RHSA-2026:47910 Released 2026-07-29 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.3, osbuild-composer-core-101.3-4.el9_4.3, osbuild-composer-worker-101.3-4.el9_4.3
- RHSA-2026:47714 Released 2026-07-29 · Red Hat rating Importantgrafana security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-27.el9_4, grafana-selinux-9.2.10-27.el9_4
- RHSA-2026:47721 Released 2026-07-29 · Red Hat rating Importantgrafana-pcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.1
- RHSA-2026:47722 Released 2026-07-29 · Red Hat rating Importantgrafana security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-12.el9_2
- RHSA-2026:47719 Released 2026-07-29 · Red Hat rating Importantgolang security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.25.9-1.el9_2, golang-1.25.9-1.el9_2, golang-bin-1.25.9-1.el9_2 +5
- RHSA-2026:47952 Released 2026-07-29 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.2.12
- Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:42051 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.14.0 release.
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42050 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.13.0 release.
- Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42049 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.15.1 release.
- Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42048 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.16.1 release.
- Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42047 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.12.1 release.
- Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42043 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.11.1 release.
- Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:41019 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
- RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
- RHSA-2026:40945 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
- RHSA-2026:40118 Released 2026-07-15 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
- RHSA-2026:39810 Released 2026-07-15 · Red Hat rating ImportantRed Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
- 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- RHSA-2026:36796 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
- RHSA-2026:34365 Released 2026-07-01 · Red Hat rating ImportantSatellite 6.19.2 Async Update
- Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
- RHSA-2026:34368 Released 2026-07-01 · Red Hat rating ImportantSatellite 6.18.7 Async Update
- Red Hat Satellite 6.18 for RHEL 9 foreman-3.16.0.17-1.el9sat, foreman-cli-3.16.0.17-1.el9sat, foreman-debug-3.16.0.17-1.el9sat +13
- RHSA-2026:34366 Released 2026-07-01 · Red Hat rating ImportantSatellite 6.17.9 Async Update
- Red Hat Satellite 6.17 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, foreman-3.14.0.17-1.el9sat, foreman-cli-3.14.0.17-1.el9sat +16
- RHSA-2026:29854 Released 2026-06-25 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:28385 Released 2026-06-23 · Red Hat rating ImportantSatellite 6.18.6 Async Update
- Red Hat Satellite 6.18 for RHEL 9 candlepin-4.6.6-1.el9sat, candlepin-selinux-4.6.6-1.el9sat, dynflow-utils-2.0.1-1.el9sat +1
- RHSA-2026:28441 Released 2026-06-23 · Red Hat rating ImportantRed Hat Openshift Mirror Registry v2.0.11
- mirror registry for Red Hat OpenShift 2.0 registry.redhat.io/openshift/mirror-registry-rhel8
- RHSA-2026:28047 Released 2026-06-22 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 (etcd) security update
- Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
- RHSA-2026:28046 Released 2026-06-22 · Red Hat rating ModerateRed Hat OpenStack Platform 17.1 (golang-uber-multierr) security update
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-7.el9ost, golang-uber-multierr-1.5.0-2.el9ost
- RHSA-2026:28038 Released 2026-06-22 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) gvisor-tap-vsock-6:0.8.5-2.el9_6.2, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.2
- RHSA-2026:27732 Released 2026-06-22 · Red Hat rating Moderateyggdrasil-worker-package-manager security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-worker-package-manager-0.2.3-6.el10_0
- RHSA-2026:27076 Released 2026-06-18 · Red Hat rating ImportantSatellite 6.16.9 Async Update
- Red Hat Satellite 6.16 for RHEL 8 dynflow-utils-1.6.3-1.1.el8sat, python-pillow-12.2.0-1.el8pc, python3.11-pillow-12.2.0-1.el8pc +1
- Red Hat Satellite 6.16 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, python-pillow-12.2.0-1.el9pc, python3.11-pillow-12.2.0-1.el9pc +1
- RHSA-2026:26636 Released 2026-06-17 · Red Hat rating ImportantCustom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
- Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
- RHSA-2026:26585 Released 2026-06-17 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.0.15
- Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
- RHSA-2026:26571 Released 2026-06-17 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
- RHSA-2026:26568 Released 2026-06-17 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
- RHSA-2026:25999 Released 2026-06-15 · Red Hat rating Moderateyggdrasil-worker-package-manager security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-worker-package-manager-0.2.3-7.el10_2
- RHSA-2026:26010 Released 2026-06-15 · Red Hat rating ImportantCluster Observability Operator 1.5.0
- Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9 +5
- RHSA-2026:25089 Released 2026-06-10 · Red Hat rating ImportantHawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.
- HawtIO HawtIO 4.4.0
- RHSA-2026:24853 Released 2026-06-09 · Red Hat rating ImportantRed Hat Quay 3.15.5
- Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:24761 Released 2026-06-09 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.29-2.el8ap, automation-gateway-proxy-server-2.5.10-6.el8ap, automation-gateway-server-2.5.20260422-3.el8ap +4
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.29-2.el9ap, automation-gateway-proxy-server-2.6.14-3.el9ap, automation-gateway-server-2.5.20260422-3.el9ap +4
- RHSA-2026:24762 Released 2026-06-09 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 python3-click-8.3.3-1.el10ap, receptor-1.6.5-1.el10ap, receptorctl-1.6.5-1.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.12-1.el9ap, automation-controller-cli-4.7.12-1.el9ap, automation-controller-server-4.7.12-1.el9ap +10
- RHSA-2026:24716 Released 2026-06-09 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9-5.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9-5.el10_2
- RHSA-2026:24503 Released 2026-06-08 · Red Hat rating ImportantMulticluster Global Hub 1.7.1 security update
- Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
- RHSA-2026:24482 Released 2026-06-08 · Red Hat rating ImportantRHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
- RHSA-2026:24337 Released 2026-06-08 · Red Hat rating Importantrhc security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.4
- Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.4
- RHSA-2026:23361 Released 2026-06-04 · Red Hat rating ImportantRed Hat Quay 3.9.22
- Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:23345 Released 2026-06-04 · Red Hat rating ImportantMulticluster Global Hub 1.6.2 security update
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:23228 Released 2026-06-04 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8
- RHSA-2026:22937 Released 2026-06-03 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2
- RHSA-2026:22862 Released 2026-06-03 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.4.5
- Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
- RHSA-2026:22840 Released 2026-06-03 · Red Hat rating ImportantRed Hat Quay 3.10.22
- Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
- RHSA-2026:22713 Released 2026-06-03 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-4.el10_0
- RHSA-2026:22709 Released 2026-06-03 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-7.el9_6, osbuild-composer-core-132.2-7.el9_6, osbuild-composer-worker-132.2-7.el9_6
- RHSA-2026:22629 Released 2026-06-02 · Red Hat rating ImportantRed Hat Quay 3.12.18
- Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:22485 Released 2026-06-02 · Red Hat rating ImportantRed Hat Lightspeed (formerly Insights) for Runtimes security update
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
- RHSA-2026:22465 Released 2026-06-02 · Red Hat rating ImportantRed Hat Quay 3.17.2
- Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
- RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
- RHSA-2026:22423 Released 2026-06-02 · Red Hat rating ImportantMulticluster Global Hub 1.3.4 security update
- Multicluster Global Hub 1.3.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:22347 Released 2026-06-01 · Red Hat rating ImportantMulticluster Global Hub 1.4.5 security update
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:22326 Released 2026-06-01 · Red Hat rating ModerateSatellite 6.19.1 Async Update
- Red Hat Satellite 6.19 for RHEL 9 dynflow-utils-2.0.1-1.el9sat, rubygem-katello-4.20.0.4-1.el9sat
- RHSA-2026:22299 Released 2026-06-01 · Red Hat rating ModerateRed Hat OpenShift Developer Tools - Source-to-Image 1.6.2
- OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
- RHSA-2026:22141 Released 2026-06-01 · Red Hat rating Moderatego-fdo-client and go-fdo-server security update
- Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2, go-fdo-server-1.0.1-2.el10_2, go-fdo-server-manufacturer-1.0.1-2.el10_2 +2
- RHSA-2026:21772 Released 2026-05-28 · Red Hat rating ImportantRed Hat OpenShift Dev Spaces 3.28.0 Release.
- Red Hat OpenShift Dev Spaces 3.28 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/openvsx-rhel9 +3
- RHSA-2026:21769 Released 2026-05-28 · Red Hat rating ImportantMulticluster Global Hub 1.5.4 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:21338 Released 2026-05-27 · Red Hat rating ImportantRed Hat Developer Hub 1.8.7 release.
- Red Hat Developer Hub 1.8 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:21017 Released 2026-05-26 · Red Hat rating ImportantRed Hat Quay 3.14.8
- Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
- RHSA-2026:20947 Released 2026-05-26 · Red Hat rating ImportantRed Hat OpenShift GitOps v1.20.4 security update
- Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9 +1
- RHSA-2026:20556 Released 2026-05-26 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-21.el9_6, grafana-selinux-10.2.6-21.el9_6
- RHSA-2026:19839 Released 2026-05-21 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-14.el9_6
- RHSA-2026:19750 Released 2026-05-20 · Red Hat rating Importantosbuild-composer security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-7.el10_0, osbuild-composer-core-134.1-7.el10_0, osbuild-composer-worker-134.1-7.el10_0
- RHSA-2026:19722 Released 2026-05-20 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.4
- RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
- RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
- RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
- RHSA-2026:19715 Released 2026-05-20 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.4
- RHSA-2026:19714 Released 2026-05-20 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-5.el10_0
- RHSA-2026:19550 Released 2026-05-20 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0.4, ipp-usb-0.9.27-3.el10_0.4
- RHSA-2026:19450 Released 2026-05-20 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-4.el10_0
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-4.el10_0
- RHSA-2026:19352 Released 2026-05-19 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-22.el9_8, grafana-selinux-10.2.6-22.el9_8
- RHSA-2026:19351 Released 2026-05-19 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-15.el9_8
- RHSA-2026:19369 Released 2026-05-19 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-6.el9_8
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-6.el9_8
- RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
- RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
- RHSA-2026:19375 Released 2026-05-19 · Red Hat rating ImportantRed Hat Quay 3.16.4
- Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
- RHSA-2026:19132 Released 2026-05-19 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.7-3.el10_2
- RHSA-2026:19133 Released 2026-05-19 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-4.el10_2
- RHSA-2026:19144 Released 2026-05-19 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2
- RHSA-2026:19134 Released 2026-05-19 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-26.el10_2, grafana-selinux-10.2.6-26.el10_2
- RHSA-2026:19156 Released 2026-05-19 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-4.el10_2
- RHSA-2026:19136 Released 2026-05-19 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-5.el10_2
- RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
- RHSA-2026:18032 Released 2026-05-18 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-24.el10_0, grafana-selinux-10.2.6-24.el10_0
- RHSA-2026:18027 Released 2026-05-18 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-6.el10_0
- RHSA-2026:17084 Released 2026-05-13 · Red Hat rating Importantgvisor-tap-vsock security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) gvisor-tap-vsock-6:0.8.5-2.el10_0.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0.1
- RHSA-2026:17075 Released 2026-05-13 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.8-5.el10_1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.8-5.el10_1
- RHSA-2026:16875 Released 2026-05-13 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-10.el8_10
- RHSA-2026:16874 Released 2026-05-13 · Red Hat rating ImportantNetwork Observability 1.11.2 for OpenShift
- Network Observability (NETOBSERV) 1.11.0 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-compat-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9 +1
- RHSA-2026:16101 Released 2026-05-11 · Red Hat rating Importanthost-metering security update
- Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-7.el7_9, host-metering-selinux-1.4.0-7.el7_9
- RHSA-2026:16021 Released 2026-05-11 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.9-1.el9_6, golang-1.25.9-1.el9_6, golang-bin-1.25.9-1.el9_6 +5
- RHSA-2026:16024 Released 2026-05-11 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.9-1.el10_0, golang-1.25.9-1.el10_0, golang-bin-1.25.9-1.el10_0 +5
- RHSA-2026:15980 Released 2026-05-11 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-7.el8_10
- RHSA-2026:14391 Released 2026-05-06 · Red Hat rating ImportantRed Hat build of Cryostat security update
- Cryostat 4 on RHEL 9 cryostat/cryostat-storage-rhel9
- RHSA-2026:14200 Released 2026-05-06 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-8.el9_7.1
- RHSA-2026:13829 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.10.2 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
- RHSA-2026:13826 Released 2026-05-05 · Red Hat rating CriticalRed Hat Developer Hub 1.9.4 release.
- Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:13791 Released 2026-05-05 · Red Hat rating ImportantRHACS 4.9.6 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:11863 Released 2026-04-29 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.3-5.el10_1
- RHSA-2026:11803 Released 2026-04-29 · Red Hat rating ImportantVolSync v0.15 security fixes and container updates
- Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/volsync-rhel9
- RHSA-2026:11711 Released 2026-04-29 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-21.el9_7, grafana-selinux-10.2.6-21.el9_7
- RHSA-2026:11712 Released 2026-04-29 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-25.el10_1, grafana-selinux-10.2.6-25.el10_1
- RHSA-2026:11704 Released 2026-04-29 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-14.el9_7
- RHSA-2026:11514 Released 2026-04-29 · Red Hat rating Importantgrafana-pcp security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-14.el8_10
- RHSA-2026:11507 Released 2026-04-29 · Red Hat rating Importantgrafana security update
- Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-30.el8_10, grafana-selinux-9.2.10-30.el8_10
- RHSA-2026:11408 Released 2026-04-28 · Red Hat rating ImportantVolSync v0.14 security fixes and container updates
- Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/volsync-rhel9
- RHSA-2026:10704 Released 2026-04-27 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
- RHSA-2026:10219 Released 2026-04-24 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.9-1.el9_7, golang-1.25.9-1.el9_7, golang-bin-1.25.9-1.el9_7 +5
- RHSA-2026:10217 Released 2026-04-23 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.9-3.el10_1, golang-1.25.9-3.el10_1, golang-bin-1.25.9-3.el10_1 +5
- RHSA-2026:9385 Released 2026-04-21 · Red Hat rating ImportantRed Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
- RHSA-2026:7385 Released 2026-04-10 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
- RHSA-2026:7291 Released 2026-04-09 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Affected | No fix yet |
| Compliance Operator | Affected | No fix yet |
| Confidential Compute Attestation | Affected | No fix planned: Will not fix |
| Custom Metric Autoscaler operator for Red Hat Openshift | Affected | No fix yet |
| Deployment Validation Operator | Affected | No fix yet |
| ExternalDNS Operator | Affected | No fix yet |
| Fence Agents Remediation Operator | Affected | No fix yet |
| File Integrity Operator | Affected | No fix yet |
| Gatekeeper 3 | Affected | No fix yet |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet |
| Logical Volume Manager Storage | Affected | No fix yet |
| Machine Deletion Remediation Operator | Affected | No fix yet |
| Migration Toolkit for Applications 8 | Affected | No fix planned: Will not fix |
| Migration Toolkit for Containers | Affected | No fix yet |
| Multiarch Tuning Operator | Affected | No fix yet |
| Multicluster Engine for Kubernetes | Affected | No fix yet |
| Multicluster Global Hub | Affected | No fix yet |
| Network Observability Operator | Affected | No fix yet |
| OpenShift API for Data Protection | Affected | No fix yet |
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| Red Hat 3scale API Management Platform 2 | Affected | No fix planned: Will not fix |
| Red Hat AMQ Broker 7 | Affected | No fix yet |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet |
| Red Hat Advanced Cluster Security 4 | Affected | No fix yet |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet |
| Red Hat Ceph Storage 5 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 6 | Affected | No fix yet: Fix deferred |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Connectivity Link 1 | Affected | No fix yet |
| Red Hat Edge Manager 1 | Affected | No fix yet |
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 7 | Affected | No fix yet |
| Red Hat Enterprise Linux 8 | Affected | No fix yet |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
| Red Hat JBoss Web Server 6 | Affected | No fix yet |
| Red Hat Lightspeed for Runtimes Operator | Affected | No fix yet |
| Red Hat OpenShift Cluster Manager CLI | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Dev Spaces | Affected | No fix yet |
| Red Hat OpenShift Dev Workspaces Operator | Affected | No fix yet |
| Red Hat OpenShift GitOps | Affected | No fix yet |
| Red Hat OpenShift distributed tracing 3 | Affected | No fix yet |
| Red Hat OpenShift on AWS | Affected | No fix yet |
| Red Hat OpenStack Platform 16.2 | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet |
| Red Hat Openshift Data Foundation 4 | Affected | No fix yet |
| Red Hat Quay 3 | Affected | No fix yet |
| Red Hat Satellite 6 | Affected | No fix yet |
| Red Hat Service Interconnect 1 | Affected | No fix planned: Will not fix |
| Red Hat Service Interconnect 2 | Affected | No fix planned: Will not fix |
| Red Hat Trusted Artifact Signer | Affected | No fix yet |
| Red Hat Web Terminal | Affected | No fix yet |
| Red Hat build of Apache Camel - HawtIO 4 | Affected | No fix yet |
| Red Hat build of Apicurio Registry 2 | Affected | No fix planned: Will not fix |
| Security Profiles Operator | Affected | No fix yet |
| Zero Trust Workload Identity Manager | Affected | No fix yet |
| Zero Trust Workload Identity Manager - Tech Preview | Affected | No fix planned: Will not fix |
| cert-manager Operator for Red Hat OpenShift | Affected | No fix yet |
| mirror registry for Red Hat OpenShift | Affected | No fix planned: Out of support scope |
| mirror registry for Red Hat OpenShift 2 | Affected | No fix yet |
| 9Base-RHOSO-TOOLS-18 | Fixed | RHSA-2026:39810 |
| Cluster Observability Operator 1.5 | Fixed | RHSA-2026:26010 |
| Cryostat 4 on RHEL 9 | Fixed | RHSA-2026:14391 |
| Custom Metric Autoscaler 2.19 | Fixed | RHSA-2026:26636 |
| HawtIO HawtIO 4.4.0 | Fixed | RHSA-2026:25089 |
| Logging Subsystem for Red Hat OpenShift 6.0 | Fixed | RHSA-2026:26585 |
| Logging Subsystem for Red Hat OpenShift 6.2 | Fixed | RHSA-2026:47952 |
| Logging Subsystem for Red Hat OpenShift 6.4 | Fixed | RHSA-2026:22862 |
| Logging Subsystem for Red Hat OpenShift 6.5 | Fixed | RHSA-2026:56340 |
| Middleware Containers for Openshift | Fixed | — |
| Multicluster Global Hub 1.3.4 | Fixed | RHSA-2026:22423 |
| Multicluster Global Hub 1.4.9 | Fixed | RHSA-2026:22347, RHSA-2026:67516 |
| Multicluster Global Hub 1.5.8 | Fixed | RHSA-2026:21769, RHSA-2026:71597 |
| Multicluster Global Hub 1.6.6 | Fixed | RHSA-2026:23345, RHSA-2026:73419 |
| Multicluster Global Hub 1.7.4 | Fixed | RHSA-2026:24503, RHSA-2026:67842 |
| Network Observability (NETOBSERV) 1.11.0 | Fixed | RHSA-2026:16874 |
| OpenShift API for Data Protection 1.3 | Fixed | RHSA-2026:51033 |
| OpenShift API for Data Protection 1.4 | Fixed | RHSA-2026:29854 |
| OpenShift API for Data Protection 1.5 | Fixed | RHSA-2026:26568 |
| OpenShift Compliance Operator 1 | Fixed | RHSA-2026:26571 |
| OpenShift Developer Tools and Services 1.6.4 | Fixed | RHSA-2026:22299 |
| OpenShift File Integrity Operator - FIO 1 | Fixed | RHSA-2026:54288 |
| OpenShift Security Profiles Operator 1 | Fixed | RHSA-2026:76752 |
| RHEM 1.0 for RHEL 9 | Fixed | RHSA-2026:36796 |
| RHEM 1.1 for RHEL 10 | Fixed | RHSA-2026:41019 |
| RHEM 1.1 for RHEL 9 | Fixed | RHSA-2026:41019 |
| Red Hat Advanced Cluster Management for Kubernetes 2.15 | Fixed | RHSA-2026:11408 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16 | Fixed | RHSA-2026:11803 |
| Red Hat Advanced Cluster Security 4.9 | Fixed | RHSA-2026:13791 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 | Fixed | RHSA-2026:13829 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:24761 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:24761 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Fixed | RHSA-2026:24762 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:24762 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:24337 |
| Red Hat Developer Hub 1.8 | Fixed | RHSA-2026:21338 |
| Red Hat Developer Hub 1.9 | Fixed | RHSA-2026:13826 |
| Red Hat Edge Manager 1.1 | Fixed | RHSA-2026:40118, RHSA-2026:40945 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:10217, RHSA-2026:11712, RHSA-2026:11863, RHSA-2026:17075, RHSA-2026:19132, RHSA-2026:19133, RHSA-2026:19134, RHSA-2026:19135, RHSA-2026:19136, RHSA-2026:19144, RHSA-2026:19156, RHSA-2026:22141, RHSA-2026:22450, RHSA-2026:22937, RHSA-2026:24716, RHSA-2026:25999 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:10704, RHSA-2026:11507, RHSA-2026:11514, RHSA-2026:15980, RHSA-2026:16875, RHSA-2026:48790 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:10219, RHSA-2026:11704, RHSA-2026:11711, RHSA-2026:14200, RHSA-2026:19350, RHSA-2026:19351, RHSA-2026:19352, RHSA-2026:19353, RHSA-2026:19369, RHSA-2026:22714, RHSA-2026:23228 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:47719, RHSA-2026:47721, RHSA-2026:47722, RHSA-2026:48036, RHSA-2026:49600, RHSA-2026:67319 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:47712, RHSA-2026:47714, RHSA-2026:47716, RHSA-2026:47910, RHSA-2026:49509, RHSA-2026:72276 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:16024, RHSA-2026:17084, RHSA-2026:18027, RHSA-2026:18032, RHSA-2026:19450, RHSA-2026:19550, RHSA-2026:19714, RHSA-2026:19715, RHSA-2026:19719, RHSA-2026:19750, RHSA-2026:22713, RHSA-2026:27732 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:19721 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:16021, RHSA-2026:19720, RHSA-2026:19722, RHSA-2026:19839, RHSA-2026:20556, RHSA-2026:22709, RHSA-2026:24337, RHSA-2026:28038 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:17075, RHSA-2026:24716 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:19369 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:19450 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:16101, RHSA-2026:54191 |
| Red Hat Hardened Images | Fixed | RHSA-2026:7291, RHSA-2026:7385 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 | Fixed | RHSA-2026:22485 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:91248 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:91249 |
| Red Hat OpenShift Dev Spaces 3.28 | Fixed | RHSA-2026:21772 |
| Red Hat OpenShift GitOps 1.20 | Fixed | RHSA-2026:20947 |
| Red Hat OpenShift distributed tracing 3.9.3 | Fixed | RHSA-2026:9385 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2026:54757 |
| Red Hat OpenStack Platform 17.1 | Fixed | RHSA-2026:28046, RHSA-2026:28047, RHSA-2026:66401 |
| Red Hat OpenStack Services on OpenShift 18.0 | Fixed | RHSA-2026:39810 |
| Red Hat Quay 3.10 | Fixed | RHSA-2026:22840 |
| Red Hat Quay 3.12 | Fixed | RHSA-2026:22629 |
| Red Hat Quay 3.14 | Fixed | RHSA-2026:21017 |
| Red Hat Quay 3.15 | Fixed | RHSA-2026:24853 |
| Red Hat Quay 3.16 | Fixed | RHSA-2026:19375 |
| Red Hat Quay 3.17 | Fixed | RHSA-2026:22465 |
| Red Hat Quay 3.9 | Fixed | RHSA-2026:23361 |
| Red Hat Satellite 6.16 for RHEL 8 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.16 for RHEL 9 | Fixed | RHSA-2026:27076 |
| Red Hat Satellite 6.17 for RHEL 9 | Fixed | RHSA-2026:34366 |
| Red Hat Satellite 6.18 for RHEL 9 | Fixed | RHSA-2026:28385, RHSA-2026:34368 |
| Red Hat Satellite 6.19 for RHEL 9 | Fixed | RHSA-2026:22326, RHSA-2026:34365 |
| Red Hat Trusted Artifact Signer 1.3 | Fixed | RHSA-2026:24482 |
| Red Hat Web Terminal 1.11 | Fixed | RHSA-2026:42043 |
| Red Hat Web Terminal 1.12 | Fixed | RHSA-2026:42047 |
| Red Hat Web Terminal 1.13 | Fixed | RHSA-2026:42050 |
| Red Hat Web Terminal 1.14 | Fixed | RHSA-2026:42051 |
| Red Hat Web Terminal 1.15 | Fixed | RHSA-2026:42049 |
| Red Hat Web Terminal 1.16 | Fixed | RHSA-2026:42048 |
| mirror registry for Red Hat OpenShift 2.0 | Fixed | RHSA-2026:28441 |
Not affected: 84 products
- Builds for Red Hat OpenShift
- Cluster Observability Operator 1.5
- Cryostat 4 on RHEL 9
- Custom Metric Autoscaler 2.19
- External Secrets Operator for Red Hat OpenShift
- ExternalDNS Operator
- Logging Subsystem for Red Hat OpenShift 6.0
- Logging Subsystem for Red Hat OpenShift 6.2
- Logging Subsystem for Red Hat OpenShift 6.4
- Logging Subsystem for Red Hat OpenShift 6.5
- Logical Volume Manager Storage
- Migration Toolkit for Applications 8
- Multicluster Global Hub 1.3.4
- Multicluster Global Hub 1.4.9
- Multicluster Global Hub 1.5.8
- Multicluster Global Hub 1.6.6
- Multicluster Global Hub 1.7.4
- Network Observability (NETOBSERV) 1.11.0
- Node HealthCheck Operator
- OpenShift API for Data Protection 1.3
- OpenShift API for Data Protection 1.4
- OpenShift API for Data Protection 1.5
- OpenShift Compliance Operator 1
- OpenShift File Integrity Operator - FIO 1
- OpenShift Security Profiles Operator 1
- OpenShift Service Mesh 2
- OpenShift Service Mesh 3
- Power monitoring for Red Hat OpenShift
- RHEM 1.0 for RHEL 9
- RHEM 1.1 for RHEL 10
- RHEM 1.1 for RHEL 9
- Red Hat AMQ Broker 7
- Red Hat AMQ Clients
- Red Hat Advanced Cluster Management for Kubernetes 2.15
- Red Hat Advanced Cluster Management for Kubernetes 2.16
- Red Hat Advanced Cluster Security 4.9
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Developer Hub 1.8
- Red Hat Developer Hub 1.9
- Red Hat Edge Manager 1.1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Dev Spaces 3.28
- Red Hat OpenShift GitOps 1.20
- Red Hat OpenShift Virtualization 4
- Red Hat OpenShift distributed tracing 3.9.3
- Red Hat OpenShift for Windows Containers
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat Quay 3
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Red Hat Quay 3.14
- Red Hat Quay 3.15
- Red Hat Quay 3.16
- Red Hat Quay 3.17
- Red Hat Quay 3.9
- Red Hat Satellite 6
- Red Hat Satellite 6.16 for RHEL 8
- Red Hat Satellite 6.16 for RHEL 9
- Red Hat Satellite 6.17 for RHEL 9
- Red Hat Satellite 6.18 for RHEL 9
- Red Hat Satellite 6.19 for RHEL 9
- Red Hat Service Interconnect 1
- Red Hat Service Interconnect 2
- Red Hat Trusted Artifact Signer 1.3
- Red Hat Web Terminal 1.11
- Red Hat Web Terminal 1.12
- Red Hat Web Terminal 1.13
- Red Hat Web Terminal 1.14
- Red Hat Web Terminal 1.15
- Red Hat Web Terminal 1.16
- Service Telemetry Framework 1.5
- streams for Apache Kafka 3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-32282
- 2026-10-03 Alias added: GHSA-xj38-jxc5-rppx
- 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
- 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
- 2026-10-16 Fix available: Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
- 2026-10-23 Affected versions changed · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
- 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
- 2026-10-30 Fix available: Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
- 2026-10-30 Fix available: Middleware Containers for Openshift · Red Hat
- 2026-11-04 Fix available: Cluster Observability Operator 1.5, Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
- 2026-11-05 Affected versions changed · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
- 2026-11-06 Fix available: Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat
References
More Go standard library Go vulnerabilities
- TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
- TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
- TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
- TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-32282 · CVE Program
- CVE-2026-32282 · NVD
- FIRST EPSS
- GHSA-xj38-jxc5-rppx · GitHub Advisory Database · CC BY 4.0
- CVE-2026-32282 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences