Read the docs
TI-2026-24812 Aliases CVE-2026-32283GHSA-jrg3-gfjw-hm96

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Priority MEDIUM 40CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 72 fixed, 52 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-770.

Summary

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00632 50th percentileScored 2026-11-07
Fix Partial crypto/tls (Go standard library): 1.25.9, 1.26.2Red Hat: 184 advisoriesRed Hat: 72 fixed, 52 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/tlsbefore 1.25.9; 1.26.0-0 to before 1.26.21.25.9, 1.26.2Patch availableCNA
  • crypto/tls VendorGo standard library Affected before 1.25.9; 1.26.0-0 to before 1.26.2 Fixed in 1.25.9, 1.26.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.25.9; 1.26.0 to before 1.26.2VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.9; 1.26.0 to before 1.26.2 Vulnerable ·Go standard library

Remediation

  • Fix · CNA crypto/tls (Go standard library) Fixed in 1.25.9, 1.26.2

Red Hat 184 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:95576 Released 2026-11-05 · Red Hat rating Important
    Release of containers for RHOSO 18.0.22
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +23
  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
Show 181 more Red Hat advisories
  • RHSA-2026:95206 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:90329 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security advisory
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:80684 Released 2026-10-12 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:74791 Released 2026-10-01 · Red Hat rating Important
    Gatekeeper v3.20.1 security update
    • Gatekeeper 3.20 registry.redhat.io/gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
  • RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
  • RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
  • RHSA-2026:71401 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:71399 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:71398 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:71396 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:71397 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:71395 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:71394 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:71393 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:69935 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:69934 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:69933 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:69932 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:69931 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:69930 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:69929 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:69927 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:69255 Released 2026-09-21 · Red Hat rating Important
    Red Hat Quay 3.16.6
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:68349 Released 2026-09-16 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.13
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
  • RHSA-2026:66523 Released 2026-09-10 · Red Hat rating Important
    Red Hat Quay 3.12.22
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66401 Released 2026-09-10 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security and bug fix advisory
    • Red Hat OpenStack Platform 17.1 ansible-collection-ansible-posix-1.2.0-1.4.el9ost, ansible-collections-openstack-1.9.1-17.1.20260318160829.0e9a6f2.el9ost, collectd-sensubility-0.2.1-6.el9ost +47
  • RHSA-2026:66084 Released 2026-09-09 · Red Hat rating Important
    Red Hat Quay 3.10.26
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:65514 Released 2026-09-08 · Red Hat rating Important
    Red Hat Quay 3.9.26
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:65343 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
    RHOAI 2.25.11 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:60520 Released 2026-08-27 · Red Hat rating Critical
    RHOAI 3.4.4 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
  • RHSA-2026:56910 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.68 packages and security update
    • Red Hat OpenShift Container Platform 4.15 butane-0.20.0-6.rhaos4.15.el8, butane-redistributable-0.20.0-6.rhaos4.15.el8, containernetworking-plugins-1:1.4.0-7.rhaos4.15.el8 +18
  • RHSA-2026:57409 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.19.44 security and extras update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:57801 Released 2026-08-25 · Red Hat rating Important
    OpenShift Container Platform 4.21.30 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +2
  • RHSA-2026:57802 Released 2026-08-25 · Red Hat rating Important
    OpenShift Container Platform 4.21.30 security and extras update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:55903 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:55902 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:55901 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:55900 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.1 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:55898 Released 2026-08-18 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:54757 Released 2026-08-13 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
  • RHSA-2026:54435 Released 2026-08-12 · Red Hat rating Important
    Streams for Apache Kafka 3.2.1 release and security update
    • Streams for Apache Kafka 3.2.1
  • RHSA-2026:54191 Released 2026-08-12 · Red Hat rating Important
    rhc-worker-script security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.11-1.el7_9
  • RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
  • RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
  • RHSA-2026:49600 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.3
  • RHSA-2026:49509 Released 2026-08-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-8.el9_4
  • RHSA-2026:48790 Released 2026-07-31 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-1.el8_10, osbuild-composer-core-101.5-1.el8_10, osbuild-composer-worker-101.5-1.el8_10
  • RHSA-2026:48036 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-6.el9_2, osbuild-composer-core-76.1-6.el9_2, osbuild-composer-dnf-json-76.1-6.el9_2 +1
  • RHSA-2026:47712 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.25.9-1.el9_4, golang-1.25.9-1.el9_4, golang-bin-1.25.9-1.el9_4 +4
  • RHSA-2026:47716 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-8.el9_4
  • RHSA-2026:47910 Released 2026-07-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.3, osbuild-composer-core-101.3-4.el9_4.3, osbuild-composer-worker-101.3-4.el9_4.3
  • RHSA-2026:47714 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-27.el9_4, grafana-selinux-9.2.10-27.el9_4
  • RHSA-2026:47721 Released 2026-07-29 · Red Hat rating Important
    grafana-pcp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.1
  • RHSA-2026:47722 Released 2026-07-29 · Red Hat rating Important
    grafana security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-12.el9_2
  • RHSA-2026:47719 Released 2026-07-29 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.25.9-1.el9_2, golang-1.25.9-1.el9_2, golang-bin-1.25.9-1.el9_2 +5
  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:41019 Released 2026-07-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
  • RHSA-2026:39810 Released 2026-07-15 · Red Hat rating Important
    Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
  • RHSA-2026:36796 Released 2026-07-08 · Red Hat rating Important
    Red Hat Edge Manager Version 1.0.3 Security Update
    • RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
  • RHSA-2026:34365 Released 2026-07-01 · Red Hat rating Important
    Satellite 6.19.2 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
  • RHSA-2026:34196 Released 2026-07-01 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) podman-4:4.9.4-20.el9_4.3, podman-docker-4:4.9.4-20.el9_4.3, podman-plugins-4:4.9.4-20.el9_4.3 +2
  • RHSA-2026:34197 Released 2026-07-01 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) skopeo-2:1.14.6-1.el9_4, skopeo-tests-2:1.14.6-1.el9_4
  • RHSA-2026:34192 Released 2026-07-01 · Red Hat rating Important
    buildah security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) buildah-2:1.33.15-1.el9_4.1, buildah-tests-2:1.33.15-1.el9_4.1
  • RHSA-2026:33722 Released 2026-06-30 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24321+617e8352.src::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.aarch64::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.ppc64le::container-tools:rhel8 +47
  • RHSA-2026:29703 Released 2026-06-25 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-3.el9_8
  • RHSA-2026:29455 Released 2026-06-25 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.1-2.el9_8, buildah-tests-2:1.43.1-2.el9_8
  • RHSA-2026:29195 Released 2026-06-24 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-2.el10_2, buildah-tests-2:1.43.1-2.el10_2
  • RHSA-2026:29035 Released 2026-06-24 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-2.el10_2, skopeo-tests-2:1.22.2-2.el10_2
  • RHSA-2026:28074 Released 2026-06-23 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-6.el9_8, skopeo-tests-2:1.22.2-6.el9_8
  • RHSA-2026:28047 Released 2026-06-22 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 (etcd) security update
    • Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
  • RHSA-2026:28046 Released 2026-06-22 · Red Hat rating Moderate
    Red Hat OpenStack Platform 17.1 (golang-uber-multierr) security update
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-7.el9ost, golang-uber-multierr-1.5.0-2.el9ost
  • RHSA-2026:28038 Released 2026-06-22 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) gvisor-tap-vsock-6:0.8.5-2.el9_6.2, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.2
  • RHSA-2026:27076 Released 2026-06-18 · Red Hat rating Important
    Satellite 6.16.9 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 dynflow-utils-1.6.3-1.1.el8sat, python-pillow-12.2.0-1.el8pc, python3.11-pillow-12.2.0-1.el8pc +1
    • Red Hat Satellite 6.16 for RHEL 9 dynflow-utils-1.6.3-1.1.el9sat, python-pillow-12.2.0-1.el9pc, python3.11-pillow-12.2.0-1.el9pc +1
  • RHSA-2026:26636 Released 2026-06-17 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2026:26571 Released 2026-06-17 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
  • RHSA-2026:26447 Released 2026-06-16 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-3.el9_8, podman-docker-6:5.8.2-3.el9_8, podman-plugins-6:5.8.2-3.el9_8 +2
  • RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
  • RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
  • RHSA-2026:25251 Released 2026-06-11 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) containernetworking-plugins-1:1.2.0-3.el9_2.3
  • RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
  • RHSA-2026:24761 Released 2026-06-09 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.29-2.el8ap, automation-gateway-proxy-server-2.5.10-6.el8ap, automation-gateway-server-2.5.20260422-3.el8ap +4
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.29-2.el9ap, automation-gateway-proxy-server-2.6.14-3.el9ap, automation-gateway-server-2.5.20260422-3.el9ap +4
  • RHSA-2026:24762 Released 2026-06-09 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 python3-click-8.3.3-1.el10ap, receptor-1.6.5-1.el10ap, receptorctl-1.6.5-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.12-1.el9ap, automation-controller-cli-4.7.12-1.el9ap, automation-controller-server-4.7.12-1.el9ap +10
  • RHSA-2026:24470 Released 2026-06-08 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-3.el10_2, podman-docker-7:5.8.2-3.el10_2, podman-remote-7:5.8.2-3.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-3.el10_2
  • RHSA-2026:24337 Released 2026-06-08 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.4
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.4
  • RHSA-2026:23345 Released 2026-06-04 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:23228 Released 2026-06-04 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8
  • RHSA-2026:23102 Released 2026-06-04 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.26.1-2.el10_2
  • RHSA-2026:23103 Released 2026-06-04 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.25.2-4.el10_0
  • RHSA-2026:22937 Released 2026-06-03 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2
  • RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
  • RHSA-2026:22713 Released 2026-06-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-4.el10_0
  • RHSA-2026:22709 Released 2026-06-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-7.el9_6, osbuild-composer-core-132.2-7.el9_6, osbuild-composer-worker-132.2-7.el9_6
  • RHSA-2026:22485 Released 2026-06-02 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
  • RHSA-2026:22423 Released 2026-06-02 · Red Hat rating Important
    Multicluster Global Hub 1.3.4 security update
    • Multicluster Global Hub 1.3.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:22347 Released 2026-06-01 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:21769 Released 2026-05-28 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:20608 Released 2026-05-26 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) containernetworking-plugins-1:1.6.2-3.el9_6.1
  • RHSA-2026:20607 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.9-1.el9_6, buildah-tests-2:1.39.9-1.el9_6
  • RHSA-2026:20609 Released 2026-05-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6.1, skopeo-tests-2:1.18.1-5.el9_6.1
  • RHSA-2026:20556 Released 2026-05-26 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-21.el9_6, grafana-selinux-10.2.6-21.el9_6
  • RHSA-2026:20571 Released 2026-05-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.2, skopeo-tests-2:1.18.1-3.el10_0.2
  • RHSA-2026:20569 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.9-1.el10_0, buildah-tests-2:1.39.9-1.el10_0
  • RHSA-2026:20570 Released 2026-05-26 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.2, podman-docker-6:5.4.0-15.el10_0.2, podman-remote-6:5.4.0-15.el10_0.2
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.2
  • RHSA-2026:19839 Released 2026-05-21 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-14.el9_6
  • RHSA-2026:19750 Released 2026-05-20 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-7.el10_0, osbuild-composer-core-134.1-7.el10_0, osbuild-composer-worker-134.1-7.el10_0
  • RHSA-2026:19722 Released 2026-05-20 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.4
  • RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
  • RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
  • RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
  • RHSA-2026:19715 Released 2026-05-20 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.4
  • RHSA-2026:19714 Released 2026-05-20 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-5.el10_0
  • RHSA-2026:19634 Released 2026-05-20 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24306+fc1f97ae.x86_64::container-tools:rhel8 +47
  • RHSA-2026:19550 Released 2026-05-20 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) golang-github-openprinting-ipp-usb-0.9.27-3.el10_0.4, ipp-usb-0.9.27-3.el10_0.4
  • RHSA-2026:19450 Released 2026-05-20 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-4.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-4.el10_0
  • RHSA-2026:19352 Released 2026-05-19 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-22.el9_8, grafana-selinux-10.2.6-22.el9_8
  • RHSA-2026:19351 Released 2026-05-19 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-15.el9_8
  • RHSA-2026:19369 Released 2026-05-19 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-6.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-6.el9_8
  • RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
  • RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
  • RHSA-2026:19132 Released 2026-05-19 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.7-3.el10_2
  • RHSA-2026:19133 Released 2026-05-19 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-4.el10_2
  • RHSA-2026:19144 Released 2026-05-19 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2
  • RHSA-2026:19126 Released 2026-05-19 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9-4.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9-4.el10_2
  • RHSA-2026:19134 Released 2026-05-19 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-26.el10_2, grafana-selinux-10.2.6-26.el10_2
  • RHSA-2026:19156 Released 2026-05-19 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-4.el10_2
  • RHSA-2026:19136 Released 2026-05-19 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-5.el10_2
  • RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
  • RHSA-2026:19139 Released 2026-05-19 · Red Hat rating Important
    go-fdo-client security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-3.el10_2
  • RHSA-2026:19137 Released 2026-05-19 · Red Hat rating Important
    go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-server-1.0.1-1.el10_2, go-fdo-server-manufacturer-1.0.1-1.el10_2, go-fdo-server-owner-1.0.1-1.el10_2 +1
  • RHSA-2026:18032 Released 2026-05-18 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-24.el10_0, grafana-selinux-10.2.6-24.el10_0
  • RHSA-2026:18027 Released 2026-05-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.2.2-6.el10_0
  • RHSA-2026:17287 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.3, podman-docker-5:5.4.0-20.el9_6.3, podman-plugins-5:5.4.0-20.el9_6.3 +2
  • RHSA-2026:17084 Released 2026-05-13 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) gvisor-tap-vsock-6:0.8.5-2.el10_0.1, gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el10_0.1
  • RHSA-2026:17075 Released 2026-05-13 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.8-5.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.8-5.el10_1
  • RHSA-2026:16875 Released 2026-05-13 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-10.el8_10
  • RHSA-2026:16102 Released 2026-05-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.11-1.el9_0, buildah-tests-1:1.26.11-1.el9_0
  • RHSA-2026:16101 Released 2026-05-11 · Red Hat rating Important
    host-metering security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-7.el7_9, host-metering-selinux-1.4.0-7.el7_9
  • RHSA-2026:16021 Released 2026-05-11 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.25.9-1.el9_6, golang-1.25.9-1.el9_6, golang-bin-1.25.9-1.el9_6 +5
  • RHSA-2026:16024 Released 2026-05-11 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.25.9-1.el10_0, golang-1.25.9-1.el10_0, golang-bin-1.25.9-1.el10_0 +5
  • RHSA-2026:15980 Released 2026-05-11 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-7.el8_10
  • RHSA-2026:14391 Released 2026-05-06 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-storage-rhel9
  • RHSA-2026:14200 Released 2026-05-06 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-8.el9_7.1
  • RHSA-2026:14162 Released 2026-05-06 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.9.3 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9
  • RHSA-2026:11881 Released 2026-04-29 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-4.el10_1
  • RHSA-2026:11863 Released 2026-04-29 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.3-5.el10_1
  • RHSA-2026:11711 Released 2026-04-29 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-21.el9_7, grafana-selinux-10.2.6-21.el9_7
  • RHSA-2026:11712 Released 2026-04-29 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-25.el10_1, grafana-selinux-10.2.6-25.el10_1
  • RHSA-2026:11704 Released 2026-04-29 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-14.el9_7
  • RHSA-2026:11514 Released 2026-04-29 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-14.el8_10
  • RHSA-2026:11507 Released 2026-04-29 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-30.el8_10, grafana-selinux-9.2.10-30.el8_10
  • RHSA-2026:10704 Released 2026-04-27 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
  • RHSA-2026:10219 Released 2026-04-24 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.9-1.el9_7, golang-1.25.9-1.el9_7, golang-bin-1.25.9-1.el9_7 +5
  • RHSA-2026:10217 Released 2026-04-23 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.25.9-3.el10_1, golang-1.25.9-3.el10_1, golang-bin-1.25.9-3.el10_1 +5
  • RHSA-2026:7385 Released 2026-04-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.9-1.hum1@aarch64, golang1.25-1.25.9-1.hum1@src, golang1.25-1.25.9-1.hum1@x86_64 +12
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Builds for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Deployment Validation OperatorAffectedNo fix yet
External Secrets Operator for Red Hat OpenShiftAffectedNo fix planned: Will not fix
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Logical Volume Manager StorageAffectedNo fix yet
Machine Deletion Remediation OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix planned: Will not fix
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat AI Inference ServerAffectedNo fix planned: Will not fix
Red Hat AMQ Broker 7AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 4AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix yet
Red Hat Edge Manager 1AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat JBoss Web Server 6AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Red Hat build of Apache Camel - HawtIO 4AffectedNo fix yet
Red Hat build of Apicurio Registry 2AffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix yet
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
mirror registry for Red Hat OpenShiftAffectedNo fix planned: Out of support scope
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:39810
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cryostat 4 on RHEL 9Fixed RHSA-2026:14391
Custom Metric Autoscaler 2.19Fixed RHSA-2026:26636
Gatekeeper 3.20Fixed RHSA-2026:74791
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:68349
Middleware Containers for OpenshiftFixed—
Multicluster Global Hub 1.3.4Fixed RHSA-2026:22423
Multicluster Global Hub 1.4.9Fixed RHSA-2026:22347
Multicluster Global Hub 1.5.8Fixed RHSA-2026:21769
Multicluster Global Hub 1.6.6Fixed RHSA-2026:23345
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
OpenShift Compliance Operator 1Fixed RHSA-2026:26571, RHSA-2026:95612
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.0 for RHEL 9Fixed RHSA-2026:36796
RHEM 1.1 for RHEL 10Fixed RHSA-2026:41019
RHEM 1.1 for RHEL 9Fixed RHSA-2026:41019
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:24761
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:24761
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:24762
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:24762
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:24337
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:10217, RHSA-2026:11712, RHSA-2026:11863, RHSA-2026:11881, RHSA-2026:17075, RHSA-2026:19126, RHSA-2026:19132, RHSA-2026:19133, RHSA-2026:19134, RHSA-2026:19135, RHSA-2026:19136, RHSA-2026:19137, RHSA-2026:19139, RHSA-2026:19144, RHSA-2026:19156, RHSA-2026:22450, RHSA-2026:22937, RHSA-2026:23102, RHSA-2026:24470, RHSA-2026:29035, RHSA-2026:29195
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:10704, RHSA-2026:11507, RHSA-2026:11514, RHSA-2026:15980, RHSA-2026:16875, RHSA-2026:33722, RHSA-2026:48790
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:10219, RHSA-2026:11704, RHSA-2026:11711, RHSA-2026:14200, RHSA-2026:19350, RHSA-2026:19351, RHSA-2026:19352, RHSA-2026:19353, RHSA-2026:19369, RHSA-2026:22714, RHSA-2026:23228, RHSA-2026:26447, RHSA-2026:28074, RHSA-2026:29455, RHSA-2026:29703
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:19634, RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:19634
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:16102
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25251, RHSA-2026:25252, RHSA-2026:47719, RHSA-2026:47721, RHSA-2026:47722, RHSA-2026:48036, RHSA-2026:49600, RHSA-2026:67319
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:34192, RHSA-2026:34196, RHSA-2026:34197, RHSA-2026:47712, RHSA-2026:47714, RHSA-2026:47716, RHSA-2026:47910, RHSA-2026:49509, RHSA-2026:72276
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:16024, RHSA-2026:17084, RHSA-2026:18027, RHSA-2026:18032, RHSA-2026:19450, RHSA-2026:19550, RHSA-2026:19714, RHSA-2026:19715, RHSA-2026:19719, RHSA-2026:19750, RHSA-2026:20569, RHSA-2026:20570, RHSA-2026:20571, RHSA-2026:22713, RHSA-2026:23103
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:19721
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:16021, RHSA-2026:17287, RHSA-2026:19720, RHSA-2026:19722, RHSA-2026:19839, RHSA-2026:20556, RHSA-2026:20607, RHSA-2026:20608, RHSA-2026:20609, RHSA-2026:22709, RHSA-2026:24337, RHSA-2026:28038
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:19634
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:49944, RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:17075, RHSA-2026:19126, RHSA-2026:24470
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:19369
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:19450, RHSA-2026:20570
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:16101, RHSA-2026:54191
Red Hat Hardened ImagesFixed RHSA-2026:7291, RHSA-2026:7385
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:22485
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat OpenShift AI 2.25Fixed RHSA-2026:42644, RHSA-2026:65126, RHSA-2026:87410
Red Hat OpenShift AI 3.4Fixed RHSA-2026:60520, RHSA-2026:69927, RHSA-2026:69929, RHSA-2026:69930, RHSA-2026:69931, RHSA-2026:69932, RHSA-2026:69933, RHSA-2026:69934, RHSA-2026:69935, RHSA-2026:84734
Red Hat OpenShift AI 3.5Fixed RHSA-2026:71393, RHSA-2026:71394, RHSA-2026:71395, RHSA-2026:71396, RHSA-2026:71397, RHSA-2026:71398, RHSA-2026:71399, RHSA-2026:71401
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:56910
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:57409
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:57801, RHSA-2026:57802
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:65343
Red Hat OpenShift distributed tracing 3.9.3Fixed RHSA-2026:14162
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:54757, RHSA-2026:95206
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:28046, RHSA-2026:28047, RHSA-2026:66401, RHSA-2026:80684, RHSA-2026:90329
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:39810, RHSA-2026:95576
Red Hat Quay 3.10Fixed RHSA-2026:66084
Red Hat Quay 3.12Fixed RHSA-2026:66523
Red Hat Quay 3.16Fixed RHSA-2026:69255
Red Hat Quay 3.9Fixed RHSA-2026:65514
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:27076
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:27076
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:34365
Red Hat Web Terminal 1.11Fixed RHSA-2026:55901
Red Hat Web Terminal 1.12Fixed RHSA-2026:55898
Red Hat Web Terminal 1.13Fixed RHSA-2026:55902
Red Hat Web Terminal 1.14Fixed RHSA-2026:55903
Red Hat Web Terminal 1.15Fixed RHSA-2026:55900
Streams for Apache Kafka 3.2.1Fixed RHSA-2026:54435
Not affected: 68 products
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler 2.19
  • ExternalDNS Operator
  • File Integrity Operator
  • Gatekeeper 3.20
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logical Volume Manager Storage
  • Migration Toolkit for Applications 8
  • Multicluster Global Hub 1.3.4
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability Operator
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Compliance Operator 1
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 2
  • OpenShift Service Mesh 3
  • RHEM 1.0 for RHEL 9
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat AMQ Broker 7
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat OpenShift distributed tracing 3.9.3
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.16
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Service Interconnect 1
  • Red Hat Service Interconnect 2
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Service Telemetry Framework 1.5
  • mirror registry for Red Hat OpenShift 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-32283
  2. 2026-10-03 Alias added: GHSA-jrg3-gfjw-hm96
  3. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  4. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  5. 2026-10-09 Fix available: Red Hat OpenShift distributed tracing 3.11.2 · Red Hat
  6. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  7. 2026-10-13 Fix available: RHSA-2026:80684 · Red Hat
  8. 2026-10-13 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  11. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  12. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  13. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  14. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  15. 2026-10-20 Affected versions changed · Red Hat
  16. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  17. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  18. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  19. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  20. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  21. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  22. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  23. 2026-10-23 Affected versions changed · Red Hat
  24. 2026-10-24 Fix available: Red Hat OpenShift distributed tracing 3.11.3 · Red Hat
  25. 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
  26. 2026-10-26 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  27. 2026-10-27 Affected versions changed · Red Hat
  28. 2026-10-27 Affected versions changed · Red Hat
  29. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  30. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  31. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  32. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  33. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  34. 2026-10-30 Affected versions changed · Red Hat
  35. 2026-10-30 Affected versions changed · Red Hat
  36. 2026-10-30 Fix available: Middleware Containers for Openshift · Red Hat
  37. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  38. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4 · Red Hat
  39. 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
  40. 2026-11-04 Affected versions changed · Red Hat
  41. 2026-11-05 EPSS moved to the 50th–90th percentile
  42. 2026-11-05 Affected versions changed · Red Hat
  43. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat
  44. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  45. 2026-11-06 Fix available: RHSA-2026:95576 · Red Hat
  46. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  47. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat

References

Patch 1

Advisory 1

Other 2

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences