Read the docs
TI-2026-26182 Aliases CVE-2026-33810GHSA-fv83-x2xw-2j55

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Priority MEDIUM 42CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · Low · None
Fix status
Partial Red Hat: 54 fixed, 33 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00346 28th percentileScored 2026-11-07
Fix Partial crypto/x509 (Go standard library): 1.26.2Red Hat: 96 advisoriesRed Hat: 54 fixed, 33 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/x5091.26.0-0 to before 1.26.21.26.2Patch availableCNA
  • crypto/x509 VendorGo standard library Affected 1.26.0-0 to before 1.26.2 Fixed in 1.26.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*1.26.0 to before 1.26.2VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions 1.26.0 to before 1.26.2 Vulnerable ·Go standard library

Remediation

  • Fix · CNA crypto/x509 (Go standard library) Fixed in 1.26.2

Red Hat 96 advisories

  • RHSA-2026:92291 Released 2026-10-29 · Red Hat rating Important
    LVMS 4.16 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.16 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
Show 93 more Red Hat advisories
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:76795 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-28.el9_4, grafana-selinux-9.2.10-28.el9_4
  • RHSA-2026:76809 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-13.el9_2
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:70201 Released 2026-09-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-9.el10_2, podman-docker-7:5.8.2-9.el10_2, podman-remote-7:5.8.2-9.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-9.el10_2
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:67518 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-23.el9_6, grafana-selinux-10.2.6-23.el9_6
  • RHSA-2026:67517 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-26.el10_0, grafana-selinux-10.2.6-26.el10_0
  • RHSA-2026:67149 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.7
  • RHSA-2026:67159 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-9.el9_4
  • RHSA-2026:67160 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.2
  • RHSA-2026:67134 Released 2026-09-14 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-6.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-6.el10_0
  • RHSA-2026:66327 Released 2026-09-10 · Red Hat rating Important
    osbuild-composer security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-12.el10_0, osbuild-composer-core-134.1-12.el10_0, osbuild-composer-worker-134.1-12.el10_0
  • RHSA-2026:65895 Released 2026-09-09 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-3.el10_2.2, osbuild-composer-core-165.1-3.el10_2.2, osbuild-composer-worker-165.1-3.el10_2.2
  • RHSA-2026:65880 Released 2026-09-09 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) ignition-2.17.0-2.el9_4.2, ignition-edge-2.17.0-2.el9_4.2, ignition-validate-2.17.0-2.el9_4.2
  • RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
  • RHSA-2026:65359 Released 2026-09-08 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) ignition-2.15.0-2.el9_2.1, ignition-edge-2.15.0-2.el9_2.1, ignition-validate-2.15.0-2.el9_2.1
  • RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
    RHOAI 2.25.11 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:63332 Released 2026-09-04 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-5.el10_2, buildah-tests-2:1.43.1-5.el10_2
  • RHSA-2026:62578 Released 2026-09-02 · Red Hat rating Important
    go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-server-1.0.1-2.el10_2.4, go-fdo-server-manufacturer-1.0.1-2.el10_2.4, go-fdo-server-owner-1.0.1-2.el10_2.4 +1
  • RHSA-2026:62577 Released 2026-09-02 · Red Hat rating Important
    go-fdo-client security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2.7
  • RHSA-2026:61907 Released 2026-09-01 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) runc-4:1.2.9-1.el9_4.2
  • RHSA-2026:61313 Released 2026-08-31 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-6.el10_0
  • RHSA-2026:61253 Released 2026-08-31 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.5-1.el9_2, golang-1.26.5-1.el9_2, golang-bin-1.26.5-1.el9_2 +5
  • RHSA-2026:59546 Released 2026-08-25 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) ignition-2.21.0-2.el10_0.3, ignition-edge-2.21.0-2.el10_0.3, ignition-validate-2.21.0-2.el10_0.3
  • RHSA-2026:57649 Released 2026-08-20 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.5-1.el9_4, golang-1.26.5-1.el9_4, golang-bin-1.26.5-1.el9_4 +5
  • RHSA-2026:57126 Released 2026-08-19 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2.2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2.2
  • RHSA-2026:56223 Released 2026-08-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-15.el9_6
  • RHSA-2026:56143 Released 2026-08-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.3.0-1.el10_0
  • RHSA-2026:54757 Released 2026-08-13 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
  • RHSA-2026:51288 Released 2026-08-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8, buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 +47
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:49712 Released 2026-08-03 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.5-1.el9_6, golang-1.26.5-1.el9_6, golang-bin-1.26.5-1.el9_6 +5
  • RHSA-2026:49703 Released 2026-08-03 · Red Hat rating Important
    delve security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-1.el10_0
  • RHSA-2026:49702 Released 2026-08-03 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.5-1.el10_0, golang-1.26.5-1.el10_0, golang-bin-1.26.5-1.el10_0 +5
  • RHSA-2026:47952 Released 2026-07-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.12
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:42051 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42050 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42049 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.1 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42047 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42043 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:40945 Released 2026-07-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:40118 Released 2026-07-15 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.3 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:39810 Released 2026-07-15 · Red Hat rating Important
    Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
  • RHSA-2026:36796 Released 2026-07-08 · Red Hat rating Important
    Red Hat Edge Manager Version 1.0.3 Security Update
    • RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
  • RHSA-2026:36651 Released 2026-07-08 · Red Hat rating Important
    Red Hat Edge Manager Version 1.0.3 Security Update
    • Red Hat Edge Manager 1.0 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +9
  • RHSA-2026:34365 Released 2026-07-01 · Red Hat rating Important
    Satellite 6.19.2 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 candlepin-4.7.5-1.el9sat, candlepin-selinux-4.7.5-1.el9sat, foreman-3.18.0.7-1.el9sat +17
  • RHSA-2026:34196 Released 2026-07-01 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) podman-4:4.9.4-20.el9_4.3, podman-docker-4:4.9.4-20.el9_4.3, podman-plugins-4:4.9.4-20.el9_4.3 +2
  • RHSA-2026:34197 Released 2026-07-01 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) skopeo-2:1.14.6-1.el9_4, skopeo-tests-2:1.14.6-1.el9_4
  • RHSA-2026:34192 Released 2026-07-01 · Red Hat rating Important
    buildah security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) buildah-2:1.33.15-1.el9_4.1, buildah-tests-2:1.33.15-1.el9_4.1
  • RHSA-2026:29854 Released 2026-06-25 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:28047 Released 2026-06-22 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 (etcd) security update
    • Red Hat OpenStack Platform 17.1 etcd-3.4.26-9.5.el9ost
  • RHSA-2026:26585 Released 2026-06-17 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.15
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
  • RHSA-2026:26571 Released 2026-06-17 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
  • RHSA-2026:26568 Released 2026-06-17 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
  • RHSA-2026:25089 Released 2026-06-10 · Red Hat rating Important
    HawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.
    • HawtIO HawtIO 4.4.0
  • RHSA-2026:24478 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
  • RHSA-2026:23345 Released 2026-06-04 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:22962 Released 2026-06-03 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:22961 Released 2026-06-03 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.0 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:22960 Released 2026-06-03 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:22959 Released 2026-06-03 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:22958 Released 2026-06-03 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:22862 Released 2026-06-03 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.4.5
    • Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/vector-rhel9
  • RHSA-2026:22485 Released 2026-06-02 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:22347 Released 2026-06-01 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:21772 Released 2026-05-28 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.28.0 Release.
    • Red Hat OpenShift Dev Spaces 3.28 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/openvsx-rhel9 +3
  • RHSA-2026:21769 Released 2026-05-28 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
  • RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
  • RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
  • RHSA-2026:19714 Released 2026-05-20 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-5.el10_0
  • RHSA-2026:19350 Released 2026-05-19 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8
  • RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
  • RHSA-2026:19181 Released 2026-05-19 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.2-1.el9_8, golang-1.26.2-1.el9_8, golang-bin-1.26.2-1.el9_8 +5
  • RHSA-2026:19144 Released 2026-05-19 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2
  • RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
  • RHSA-2026:19022 Released 2026-05-19 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.2-2.el10_2, golang-1.26.2-2.el10_2, golang-bin-1.26.2-2.el10_2 +5
  • RHSA-2026:14391 Released 2026-05-06 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-storage-rhel9
  • RHSA-2026:13545 Released 2026-05-04 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9 +11
  • RHSA-2026:11331 Released 2026-04-28 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.2
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:11330 Released 2026-04-28 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.5
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:10158 Released 2026-04-23 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.2
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:10155 Released 2026-04-23 · Red Hat rating Important
    Red Hat OpenShift Builds 1.6.5
    • Builds for Red Hat OpenShift 1.6.0 registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9 +1
  • RHSA-2026:9385 Released 2026-04-21 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:7291 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.2-1.hum1@aarch64, golang1.26-1.26.2-1.hum1@src, golang1.26-1.26.2-1.hum1@x86_64 +12

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Deployment Validation OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
Gatekeeper 3AffectedNo fix planned: Will not fix
Logging Subsystem for Red Hat OpenShiftAffectedNo fix yet
Logical Volume Manager StorageAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix planned: Will not fix
Red Hat Satellite 6AffectedNo fix yet
Red Hat Service Interconnect 2AffectedNo fix yet: Fix deferred
Red Hat Trusted Artifact SignerAffectedNo fix yet
cert-manager Operator for Red Hat OpenShiftAffectedNo fix yet
mirror registry for Red Hat OpenShiftAffectedNo fix yet
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:39810
Builds for Red Hat OpenShift 1.6.0Fixed RHSA-2026:10155
Cryostat 4 on RHEL 9Fixed RHSA-2026:14391
HawtIO HawtIO 4.4.0Fixed RHSA-2026:25089
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:26585
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:47952
Logging Subsystem for Red Hat OpenShift 6.4Fixed RHSA-2026:22862
Logical Volume Manager Storage 4.16Fixed RHSA-2026:92291
Multicluster Global Hub 1.4.9Fixed RHSA-2026:22347
Multicluster Global Hub 1.5.8Fixed RHSA-2026:21769
Multicluster Global Hub 1.6.6Fixed RHSA-2026:23345
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:29854
OpenShift API for Data Protection 1.5Fixed RHSA-2026:26568
OpenShift Compliance Operator 1Fixed RHSA-2026:26571
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.0 for RHEL 9Fixed RHSA-2026:36796
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:13545
Red Hat Edge Manager 1.0Fixed RHSA-2026:36651
Red Hat Edge Manager 1.1Fixed RHSA-2026:40118, RHSA-2026:40945
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:19022, RHSA-2026:19135, RHSA-2026:19144, RHSA-2026:57126, RHSA-2026:62577, RHSA-2026:62578, RHSA-2026:63332, RHSA-2026:65534, RHSA-2026:65895, RHSA-2026:70201
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:19181, RHSA-2026:19350, RHSA-2026:19353
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:61253, RHSA-2026:65359, RHSA-2026:67160, RHSA-2026:76809
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:34192, RHSA-2026:34196, RHSA-2026:34197, RHSA-2026:57649, RHSA-2026:61907, RHSA-2026:65880, RHSA-2026:67159, RHSA-2026:76795
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:19714, RHSA-2026:19719, RHSA-2026:49702, RHSA-2026:49703, RHSA-2026:56143, RHSA-2026:59546, RHSA-2026:61313, RHSA-2026:66327, RHSA-2026:67134, RHSA-2026:67149, RHSA-2026:67517
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:19721
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:19720, RHSA-2026:49712, RHSA-2026:56223, RHSA-2026:67518
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:51288, RHSA-2026:69235, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:57126, RHSA-2026:70201
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:67134
Red Hat Hardened ImagesFixed RHSA-2026:7291
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:22485
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat OpenShift AI 2.25Fixed RHSA-2026:65126
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:10158
Red Hat OpenShift Dev Spaces 3.28Fixed RHSA-2026:21772
Red Hat OpenShift distributed tracing 3.9.3Fixed RHSA-2026:9385
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:54757
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:28047
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:39810
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:34365
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:24478
Red Hat Web Terminal 1.11Fixed RHSA-2026:22960, RHSA-2026:42043
Red Hat Web Terminal 1.12Fixed RHSA-2026:22958, RHSA-2026:42047
Red Hat Web Terminal 1.13Fixed RHSA-2026:22962, RHSA-2026:42050
Red Hat Web Terminal 1.14Fixed RHSA-2026:22959, RHSA-2026:42051
Red Hat Web Terminal 1.15Fixed RHSA-2026:22961, RHSA-2026:42049
Not affected: 69 products
  • Builds for Red Hat OpenShift 1.6.0
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • External Secrets Operator for Red Hat OpenShift
  • ExternalDNS Operator
  • File Integrity Operator
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.4
  • Logical Volume Manager Storage
  • Logical Volume Manager Storage 4.16
  • Machine Deletion Remediation Operator
  • Migration Toolkit for Applications 8
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Compliance Operator 1
  • OpenShift Lightspeed
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 2
  • OpenShift Service Mesh 3
  • Power monitoring for Red Hat OpenShift
  • RHEM 1.0 for RHEL 9
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat AI Inference Server
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Developer Hub 1
  • Red Hat Edge Manager 1.0
  • Red Hat Edge Manager 1.1
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Dev Spaces 3.28
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.9.3
  • Red Hat OpenShift for Windows Containers
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat Quay 3
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Service Interconnect 1
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Service Telemetry Framework 1.5
  • Zero Trust Workload Identity Manager
  • Zero Trust Workload Identity Manager - Tech Preview
  • mirror registry for Red Hat OpenShift 2
  • streams for Apache Kafka 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-33810
  2. 2026-10-03 Alias added: GHSA-fv83-x2xw-2j55
  3. 2026-10-07 Fix available: RHSA-2026:19022 · Red Hat
  4. 2026-10-07 Fix available: RHSA-2026:19181 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:76795 · Red Hat
  6. 2026-10-07 Fix available: RHSA-2026:76809 · Red Hat
  7. 2026-10-07 Affected versions changed · Red Hat
  8. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  9. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  10. 2026-10-09 Affected versions changed · Red Hat
  11. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  12. 2026-10-13 Fix available: RHSA-2026:19350 · Red Hat
  13. 2026-10-13 Affected versions changed · Red Hat
  14. 2026-10-16 Fix available: Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  15. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  16. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  17. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  18. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  19. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  20. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  21. 2026-10-23 Affected versions changed · Red Hat
  22. 2026-10-26 Affected versions changed · Red Hat
  23. 2026-10-27 Affected versions changed · Red Hat
  24. 2026-10-27 Affected versions changed · Red Hat
  25. 2026-10-27 Affected versions changed · Red Hat
  26. 2026-10-28 Affected versions changed · Red Hat
  27. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  28. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  29. 2026-10-29 Affected versions changed · Red Hat
  30. 2026-10-30 Fix available: RHSA-2026:92291 · Red Hat
  31. 2026-10-30 Fix available: Logical Volume Manager Storage 4.16 · Red Hat
  32. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat

References

Patch 1

Advisory 1

Other 2

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences