Crash when handling long CNAME response in net
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 107 fixed, 52 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-415 and the CVSS impact.
Summary
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Go standard library | net | before 1.25.10; 1.26.0-0 to before 1.26.3 | 1.25.10, 1.26.3 | Patch available | CNA |
- net VendorGo standard library Affected before 1.25.10; 1.26.0-0 to before 1.26.3 Fixed in 1.25.10, 1.26.3 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | before 1.25.10; 1.26.0 to before 1.26.3 | Vulnerable | Go standard library |
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.25.10; 1.26.0 to before 1.26.3 Vulnerable ·Go standard library
Remediation
- Fix · CNA net (Go standard library) Fixed in 1.25.10, 1.26.3
Red Hat 157 advisories
- RHSA-2026:95612 Released 2026-11-05 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
- RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
- RHSA-2026:95206 Released 2026-11-04 · Red Hat rating ImportantUpdated Red Hat OpenStack Platform 16.2 director Operator container images
- Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
Show 154 more Red Hat advisories
- RHSA-2026:93598 Released 2026-11-02 · Red Hat rating ImportantLVMS 4.17 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.17 registry.redhat.io/lvms4/lvms-rhel9-operator
- RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
- RHSA-2026:91249 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.5.5 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:91248 Released 2026-10-27 · Red Hat rating CriticalRed Hat AI Base Images 3.4.6 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
- RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
- RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
- RHSA-2026:90329 Released 2026-10-26 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 security advisory
- Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
- RHSA-2026:88199 Released 2026-10-22 · Red Hat rating ImportantLVMS 4.12 Bug Fix and Enhancement update
- Logical Volume Manager Storage 4.12 registry.redhat.io/lvms4/lvms-rhel8-operator
- RHSA-2026:87410 Released 2026-10-21 · Red Hat rating CriticalRHOAI 2.25.12 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
- RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
- Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
- RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Importantgo-toolset:rhel8 security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
- RHSA-2026:84734 Released 2026-10-19 · Red Hat rating CriticalRHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:80684 Released 2026-10-12 · Red Hat rating ImportantUpdated Red Hat OpenStack Platform 17.1 director Operator container images
- Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-operator
- RHSA-2026:77532 Released 2026-10-07 · Red Hat rating ImportantRelease of components for Service Telemetry Framework 1.5.7
- Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/sg-core-rhel9
- RHSA-2026:76752 Released 2026-10-06 · Red Hat rating ImportantOpenShift Security Profiles Operator bug fix and enhancement update
- OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
- RHSA-2026:73987 Released 2026-09-30 · Red Hat rating CriticalRHOAI 3.3.7 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
- RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
- RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
- Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
- RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
- RHSA-2026:68534 Released 2026-09-23 · Red Hat rating ImportantOpenShift Container Platform 4.19.48 packages and security update
- Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-14.rhaos4.19.git3c1400a.el9, openshift-4.19.0-202609141900.p2.g63adf01.assembly.stream.el9, openshift-clients-4.19.0-202609141900.p2.ga2c805b.assembly.stream.el8 +11
- RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
- RHSA-2026:67287 Released 2026-09-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.7
- RHSA-2026:67149 Released 2026-09-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.7
- RHSA-2026:66022 Released 2026-09-09 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
- RHSA-2026:65886 Released 2026-09-09 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8.2
- RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Importantimage-builder security update
- Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
- RHSA-2026:65126 Released 2026-09-08 · Red Hat rating ImportantRHOAI 2.25.11 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
- RHSA-2026:60018 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.57 packages and security update
- Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el8, cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el9, cri-tools-1.30.0-9.el8 +25
- RHSA-2026:60025 Released 2026-09-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.57 security and extras update
- Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9 +1
- RHSA-2026:61313 Released 2026-08-31 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-6.el10_0
- RHSA-2026:61253 Released 2026-08-31 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.5-1.el9_2, golang-1.26.5-1.el9_2, golang-bin-1.26.5-1.el9_2 +5
- RHSA-2026:60520 Released 2026-08-27 · Red Hat rating CriticalRHOAI 3.4.4 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
- RHSA-2026:56910 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.68 packages and security update
- Red Hat OpenShift Container Platform 4.15 butane-0.20.0-6.rhaos4.15.el8, butane-redistributable-0.20.0-6.rhaos4.15.el8, containernetworking-plugins-1:1.4.0-7.rhaos4.15.el8 +18
- RHSA-2026:56852 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.16.69 packages and security update
- Red Hat OpenShift Container Platform 4.16 butane-0.21.0-6.rhaos4.16.el8, butane-redistributable-0.21.0-6.rhaos4.16.el8, containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8 +34
- RHSA-2026:57482 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.18.54 packages and security update
- Red Hat OpenShift Container Platform 4.18 butane-0.23.0-5.rhaos4.18.el8, butane-redistributable-0.23.0-5.rhaos4.18.el8, cri-o-1.31.13-11.rhaos4.18.git817a650.el9 +27
- RHSA-2026:56912 Released 2026-08-26 · Red Hat rating CriticalOpenShift Container Platform 4.15.68 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-console +5
- RHSA-2026:56855 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.16.69 security and extras update
- Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator
- RHSA-2026:56913 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.15.68 security and extras update
- Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-ansible-operator
- RHSA-2026:57488 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.18.54 security and extras update
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
- RHSA-2026:60302 Released 2026-08-26 · Red Hat rating ImportantRelease of containers for RHOSO 18.0.22 security update
- Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/sg-core-rhel9
- RHSA-2026:56785 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.14.72 packages and security update
- Red Hat OpenShift Container Platform 4.14 butane-0.19.0-5.rhaos4.14.el8, butane-redistributable-0.19.0-5.rhaos4.14.el8, cri-o-1.27.8-19.rhaos4.14.gitcea2db1.el8 +13
- RHSA-2026:56789 Released 2026-08-26 · Red Hat rating CriticalOpenShift Container Platform 4.14.72 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8 +5
- RHSA-2026:56790 Released 2026-08-26 · Red Hat rating ImportantOpenShift Container Platform 4.14.72 security and extras update
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-ansible-operator
- RHSA-2026:59559 Released 2026-08-25 · Red Hat rating Importantmulticluster engine for Kubernetes v2.9.7 security update
- multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +15
- RHSA-2026:59467 Released 2026-08-25 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +3
- RHSA-2026:57649 Released 2026-08-20 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.5-1.el9_4, golang-1.26.5-1.el9_4, golang-bin-1.26.5-1.el9_4 +5
- RHSA-2026:57194 Released 2026-08-19 · Red Hat rating Importantmulticluster engine for Kubernetes v2.11.5 security update
- multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +11
- RHSA-2026:57191 Released 2026-08-19 · Red Hat rating ImportantRed Hat Advanced Cluster Management for Kubernetes v2.16.3 security update
- Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +15
- RHSA-2026:54552 Released 2026-08-19 · Red Hat rating ImportantOpenShift Container Platform 4.19.43 packages and security update
- Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-9.rhaos4.19.git2100f27.el9, cri-tools-1.32.0-6.el9, openshift-4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 +10
- RHSA-2026:54556 Released 2026-08-19 · Red Hat rating ImportantOpenShift Container Platform 4.19.43 security and extras update
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
- RHSA-2026:56340 Released 2026-08-18 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.5.2
- Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:54602 Released 2026-08-18 · Red Hat rating ImportantOpenShift Container Platform 4.21.29 bug fix and security update
- Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-cli-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-haproxy-router-rhel9 +6
- RHSA-2026:54603 Released 2026-08-18 · Red Hat rating ImportantOpenShift Container Platform 4.21.29 security and extras update
- Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
- RHSA-2026:54584 Released 2026-08-18 · Red Hat rating ImportantOpenShift Container Platform 4.20.34 security and extras update
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
- RHSA-2026:54757 Released 2026-08-13 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2 security advisory
- Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
- RHSA-2026:54500 Released 2026-08-13 · Red Hat rating ImportantOpenShift Compliance Operator bug fix and enhancement update
- OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
- RHSA-2026:54441 Released 2026-08-12 · Red Hat rating ImportantRed Hat Lightspeed (formerly Insights) for Runtimes security update
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
- RHSA-2026:54435 Released 2026-08-12 · Red Hat rating ImportantStreams for Apache Kafka 3.2.1 release and security update
- Streams for Apache Kafka 3.2.1
- RHSA-2026:54287 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability Operator v0.12.1 security update
- Red Hat OpenShift Workload Availability 0.12 registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator
- RHSA-2026:54286 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability Operator v0.3.1 security update
- Red Hat OpenShift Workload Availability 0.3 registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator
- RHSA-2026:54285 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability Operator v0.7.1 security update
- Red Hat OpenShift Workload Availability 0.7 registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator
- RHSA-2026:54284 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability Operator v0.13.1 security update
- Red Hat OpenShift Workload Availability 0.13 registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator
- RHSA-2026:54283 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability v5.7.1 security update
- Red Hat OpenShift Workload Availability 5.7 registry.redhat.io/workload-availability/node-maintenance-rhel9-operator
- RHSA-2026:54274 Released 2026-08-12 · Red Hat rating ImportantRed Hat OpenShift Workload Availability Operator v0.8.1 security update
- Red Hat OpenShift Workload Availability 0.8 registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator
- RHSA-2026:54191 Released 2026-08-12 · Red Hat rating Importantrhc-worker-script security update
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.11-1.el7_9
- RHSA-2026:54168 Released 2026-08-12 · Red Hat rating Importantrhc-worker-playbook security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-6.el10_0
- RHSA-2026:53530 Released 2026-08-11 · Red Hat rating CriticalMulticluster Global Hub 1.7.2 security update
- Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:53415 Released 2026-08-11 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.152.1-1.el9_6
- RHSA-2026:53412 Released 2026-08-11 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.152.1-1.el9_4
- RHSA-2026:53413 Released 2026-08-11 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.152.1-1.el10_0
- RHSA-2026:51341 Released 2026-08-06 · Red Hat rating ImportantTechnical preview of the satellite/iop-vmaas-rhel9 container image
- Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
- RHSA-2026:51187 Released 2026-08-06 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-5.el10_0
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-5.el10_0
- RHSA-2026:51194 Released 2026-08-06 · Red Hat rating ImportantTechnical preview of the satellite/iop-vmaas-rhel9 container image
- Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
- RHSA-2026:51057 Released 2026-08-06 · Red Hat rating ImportantOpenShift Source To Image 1.6.3
- OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
- RHSA-2026:51033 Released 2026-08-06 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
- RHSA-2026:50888 Released 2026-08-05 · Red Hat rating ImportantRHTAS 1.4.3 - CLI Stack Release
- Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
- RHSA-2026:50843 Released 2026-08-05 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.0.16
- Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:50336 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.7-1.el10ap, receptorctl-1.6.7-1.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.15-2.el9ap, automation-controller-cli-4.7.15-2.el9ap, automation-controller-server-4.7.15-2.el9ap +15
- RHSA-2026:50319 Released 2026-08-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.31-1.el8ap, automation-eda-controller-1.1.21-1.el8ap, automation-eda-controller-base-1.1.21-1.el8ap +11
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.31-1.el9ap, automation-eda-controller-1.1.21-1.el9ap, automation-eda-controller-base-1.1.21-1.el9ap +11
- RHSA-2026:50300 Released 2026-08-04 · Red Hat rating ImportantMigration Toolkit for Applications
- Red Hat Migration Toolkit for Applications 8.1 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-ui-rhel9
- RHSA-2026:50205 Released 2026-08-04 · Red Hat rating ImportantRed Hat build of OpenTelemetry 3.10.1 release
- Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator
- RHSA-2026:49767 Released 2026-08-03 · Red Hat rating ImportantRHTAS 1.4.3 - CLI Stack Release
- Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
- RHSA-2026:49712 Released 2026-08-03 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.5-1.el9_6, golang-1.26.5-1.el9_6, golang-bin-1.26.5-1.el9_6 +5
- RHSA-2026:49703 Released 2026-08-03 · Red Hat rating Importantdelve security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-1.el10_0
- RHSA-2026:49702 Released 2026-08-03 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.5-1.el10_0, golang-1.26.5-1.el10_0, golang-bin-1.26.5-1.el10_0 +5
- RHSA-2026:48771 Released 2026-07-30 · Red Hat rating ImportantRHTAS 1.4.3 - CLI Stack Release
- Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.3@amd64, conforma-cli-stack-v1-4-1.4.3@amd64_darwin, conforma-cli-stack-v1-4-1.4.3@amd64_windows +4
- RHSA-2026:48151 Released 2026-07-29 · Red Hat rating ImportantRed Hat build of Cryostat security update
- Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-reports-rhel9 +4
- RHSA-2026:47952 Released 2026-07-29 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.2.12
- Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
- RHSA-2026:47735 Released 2026-07-29 · Red Hat rating Criticalmulticluster engine for Kubernetes v2.8.9 security update
- multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9 +5
- RHSA-2026:47388 Released 2026-07-28 · Red Hat rating Criticalmulticluster engine for Kubernetes v2.10.4 security update
- multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
- RHSA-2026:47149 Released 2026-07-28 · Red Hat rating ImportantMulticluster Global Hub 1.7.2 security update
- Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:46885 Released 2026-07-27 · Red Hat rating Criticalmulticluster engine for Kubernetes v2.10.4 security update
- multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
- RHSA-2026:44622 Released 2026-07-23 · Red Hat rating ImportantMulticluster Global Hub 1.6.4 security update
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:43692 Released 2026-07-22 · Red Hat rating ImportantRed Hat OpenShift API for Data Protection
- OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
- RHSA-2026:43038 Released 2026-07-21 · Red Hat rating CriticalMigration Toolkit for Applications
- Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-solution-server-rhel9
- RHSA-2026:42946 Released 2026-07-21 · Red Hat rating Importantrhc-worker-playbook security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.10-1.el10_2
- RHSA-2026:42852 Released 2026-07-21 · Red Hat rating ImportantMulticluster Global Hub 1.5.6 security update
- Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:42644 Released 2026-07-21 · Red Hat rating ImportantRHOAI 2.25.9 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
- RHSA-2026:42240 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.19.2.1 Async Update
- Red Hat Satellite 6.19 for RHEL 9 python3.12-pulpcore-3.85.15-5.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:42151 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.18.7.1 Async Update
- Red Hat Satellite 6.18 for RHEL 9 python3.12-pulpcore-3.73.30-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:42150 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.17.9.1 Async Update
- Red Hat Satellite 6.17 for RHEL 9 python-pulpcore-3.63.21-2.el9pc, python3.11-pulpcore-3.63.21-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:42132 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9 +7
- RHSA-2026:42079 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, automation-controller-venv-tower-4.7.14-3.el9ap, automation-gateway-proxy-2.6.17-1.el9ap +5
- RHSA-2026:42078 Released 2026-07-20 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.19-1.el8ap, ansible-test-1:2.16.19-1.el8ap, automation-controller-4.6.30-2.el8ap +24
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, ansible-test-1:2.16.19-1.el9ap, automation-controller-4.6.30-2.el9ap +24
- RHSA-2026:42082 Released 2026-07-20 · Red Hat rating ImportantSatellite 6.16.11 Async Update
- Red Hat Satellite 6.16 for RHEL 8 python-pulpcore-3.49.39-2.el8pc, python3.11-pulpcore-3.49.39-2.el8pc, yggdrasil-worker-forwarder-0.0.4-1.el8sat
- Red Hat Satellite 6.16 for RHEL 9 python-pulpcore-3.49.39-2.el9pc, python3.11-pulpcore-3.49.39-2.el9pc, yggdrasil-worker-forwarder-0.0.4-1.el9sat
- RHSA-2026:42051 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.14.0 release.
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42050 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.13.0 release.
- Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42049 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.15.1 release.
- Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
- RHSA-2026:42048 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.16.1 release.
- Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42047 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.12.1 release.
- Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:42043 Released 2026-07-20 · Red Hat rating ImportantRed Hat Web Terminal Operator 1.11.1 release.
- Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
- RHSA-2026:41928 Released 2026-07-20 · Red Hat rating ImportantRed Hat Migration Toolkit for Containers
- Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
- RHSA-2026:41055 Released 2026-07-16 · Red Hat rating Importantmulticluster engine for Kubernetes v2.6.12 security update
- multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/console-mce-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9, registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator
- RHSA-2026:41019 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- RHEM 1.1 for RHEL 10 flightctl-1.1.3-1.el10em, flightctl-agent-1.1.3-1.el10em, flightctl-cli-1.1.3-1.el10em
- RHEM 1.1 for RHEL 9 flightctl-1.1.3-1.el9em, flightctl-agent-1.1.3-1.el9em, flightctl-cli-1.1.3-1.el9em
- RHSA-2026:41030 Released 2026-07-16 · Red Hat rating ImportantMulticluster Global Hub 1.4.7 security update
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
- RHSA-2026:40945 Released 2026-07-16 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
- RHSA-2026:40118 Released 2026-07-15 · Red Hat rating ImportantRed Hat Edge Manager Version 1.1.3 Security Update
- Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
- RHSA-2026:39810 Released 2026-07-15 · Red Hat rating ImportantRed Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
- 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260602234716.a95ae05.el9ost
- RHSA-2026:39573 Released 2026-07-15 · Red Hat rating Importantyggdrasil security update
- Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2
- RHSA-2026:39319 Released 2026-07-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8.2
- RHSA-2026:39272 Released 2026-07-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-5.el10_2.6
- RHSA-2026:39266 Released 2026-07-14 · Red Hat rating Importantgit-lfs security update
- Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-12.el8_10
- RHSA-2026:38504 Released 2026-07-13 · Red Hat rating Importantcontainer-tools:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.s390x::container-tools:rhel8 +47
- RHSA-2026:37276 Released 2026-07-09 · Red Hat rating ImportantRHTAS 1.4.2 - CLI Stack Release
- Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.2@amd64, conforma-cli-stack-v1-4-1.4.2@amd64_darwin, conforma-cli-stack-v1-4-1.4.2@amd64_windows +4
- RHSA-2026:36776 Released 2026-07-08 · Red Hat rating Importantrhc security update
- Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-8.el8_10
- RHSA-2026:36796 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- RHEM 1.0 for RHEL 9 flightctl-1.0.3-1.el9em, flightctl-agent-1.0.3-1.el9em, flightctl-cli-1.0.3-1.el9em +1
- RHSA-2026:36797 Released 2026-07-08 · Red Hat rating ImportantRHTAS 1.4.2 - CLI Stack Release
- Red Hat Trusted Artifact Signer 1.4 conforma-cli-stack-v1-4-1.4.2@amd64, conforma-cli-stack-v1-4-1.4.2@amd64_darwin, conforma-cli-stack-v1-4-1.4.2@amd64_windows +4
- RHSA-2026:36651 Released 2026-07-08 · Red Hat rating ImportantRed Hat Edge Manager Version 1.0.3 Security Update
- Red Hat Edge Manager 1.0 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +9
- RHSA-2026:36648 Released 2026-07-08 · Red Hat rating ImportantRed Hat OpenShift Builds 1.7.4
- Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
- RHSA-2026:36617 Released 2026-07-08 · Red Hat rating Importantoci-seccomp-bpf-hook security update
- Red Hat Enterprise Linux AppStream (v. 9) oci-seccomp-bpf-hook-1.2.11-2.el9_8
- RHSA-2026:36625 Released 2026-07-08 · Red Hat rating ImportantRHACS 4.10.5 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:36319 Released 2026-07-07 · Red Hat rating ImportantRHACS 4.9.9 security and bug fix update
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
- RHSA-2026:36207 Released 2026-07-07 · Red Hat rating ImportantRHACS 4.11.1 security and bug fix update
- Red Hat Advanced Cluster Security for Kubernetes 4.11 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9, registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle, registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator +4
- RHSA-2026:35994 Released 2026-07-06 · Red Hat rating ImportantRed Hat OpenShift GitOps v1.19.5 security update
- Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/dex-rhel8
- RHSA-2026:35995 Released 2026-07-06 · Red Hat rating ImportantRed Hat OpenShift GitOps v1.21.1 security update
- Red Hat OpenShift GitOps 1.21 registry.redhat.io/openshift-gitops-1/dex-rhel9
- RHSA-2026:35993 Released 2026-07-06 · Red Hat rating ImportantRed Hat OpenShift GitOps v1.20.5 security update
- Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/dex-rhel9
- RHSA-2026:35832 Released 2026-07-06 · Red Hat rating Importantgolang-github-openprinting-ipp-usb security update
- Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2.2
- RHSA-2026:34359 Released 2026-07-01 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.152.1-1.el9_8
- RHSA-2026:34357 Released 2026-07-01 · Red Hat rating Importantopentelemetry-collector security update
- Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.152.1-1.el10_2
- RHSA-2026:34364 Released 2026-07-01 · Red Hat rating ImportantLogging for Red Hat OpenShift - 6.4.6
- Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +2
- RHSA-2026:33574 Released 2026-06-30 · Red Hat rating ImportantRed Hat Developer Hub 1.9.6 release.
- Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
- RHSA-2026:33150 Released 2026-06-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.3.5
- Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:33142 Released 2026-06-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.2.7
- Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:33123 Released 2026-06-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.1.10
- Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:33120 Released 2026-06-29 · Red Hat rating ImportantRed Hat OpenShift Service Mesh 3.0.13
- Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
- RHSA-2026:23264 Released 2026-06-04 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.26-1.26.4-2.hum1@aarch64, golang1.26-1.26.4-2.hum1@src, golang1.26-1.26.4-2.hum1@x86_64 +10
- RHSA-2026:23262 Released 2026-06-04 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images golang1.25-1.25.11-2.hum1@aarch64, golang1.25-1.25.11-2.hum1@src, golang1.25-1.25.11-2.hum1@x86_64 +10
- RHSA-2026:22112 Released 2026-06-01 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.aarch64::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.ppc64le::go-toolset:rhel8, delve-1.25.2-1.module+el8.10.0+23746+9db33b5e.src::go-toolset:rhel8 +22
- RHSA-2026:22121 Released 2026-06-01 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.3-1.el9_8, golang-1.26.3-1.el9_8, golang-bin-1.26.3-1.el9_8 +5
- RHSA-2026:22120 Released 2026-06-01 · Red Hat rating Importantgolang security update
- Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.3-4.el10_2, golang-1.26.3-4.el10_2, golang-bin-1.26.3-4.el10_2 +5
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Go standard library net 1.25.10, 1.26.3
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2026-28718 Panic in Dial and LookupPort when handling NUL byte on Windows in netPriority MEDIUM 40
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Affected | No fix yet |
| Confidential Compute Attestation | Affected | No fix planned: Will not fix |
| Deployment Validation Operator | Affected | No fix yet |
| External Secrets Operator for Red Hat OpenShift | Affected | No fix planned: Will not fix |
| ExternalDNS Operator | Affected | No fix yet |
| Fence Agents Remediation Operator | Affected | No fix yet |
| File Integrity Operator | Affected | No fix yet |
| Gatekeeper 3 | Affected | No fix yet |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix planned: Will not fix |
| Logical Volume Manager Storage | Affected | No fix yet |
| Machine Deletion Remediation Operator | Affected | No fix yet |
| Multiarch Tuning Operator | Affected | No fix yet |
| Multicluster Engine for Kubernetes | Affected | No fix yet |
| Multicluster Global Hub | Affected | No fix planned: Will not fix |
| Network Observability Operator | Affected | No fix yet |
| Node HealthCheck Operator | Affected | No fix yet |
| Node Maintenance Operator | Affected | No fix yet |
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| OpenShift Pipelines | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| OpenShift Service Mesh 3 | Affected | No fix yet |
| Power monitoring for Red Hat OpenShift | Affected | No fix yet |
| Red Hat Ceph Storage 5 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 6 | Affected | No fix yet: Fix deferred |
| Red Hat Ceph Storage 9 | Affected | No fix yet: Fix deferred |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Connectivity Link 1 | Affected | No fix yet |
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift Cluster Manager CLI | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Red Hat OpenShift Dev Spaces | Affected | No fix yet |
| Red Hat OpenShift Dev Workspaces Operator | Affected | No fix yet |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat OpenShift distributed tracing 3 | Affected | No fix yet |
| Red Hat OpenShift on AWS | Affected | No fix yet |
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet |
| Red Hat OpenStack Platform 17.1 | Affected | No fix yet |
| Red Hat Quay 3 | Affected | No fix planned: Will not fix |
| Red Hat Satellite 6 | Affected | No fix yet |
| Red Hat Service Interconnect 1 | Affected | No fix planned: Will not fix |
| Red Hat Service Interconnect 2 | Affected | No fix planned: Will not fix |
| Red Hat Trusted Artifact Signer | Affected | No fix yet |
| Red Hat build of Apicurio Registry 2 | Affected | No fix planned: Will not fix |
| Self Node Remediation Operator | Affected | No fix yet |
| Storage-Based Remediation | Affected | No fix yet |
| Zero Trust Workload Identity Manager - Tech Preview | Affected | No fix planned: Will not fix |
| mirror registry for Red Hat OpenShift | Affected | No fix yet: Fix deferred |
| 9Base-RHOSO-TOOLS-18 | Fixed | RHSA-2026:39810 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372 |
| Cryostat 4 on RHEL 9 | Fixed | RHSA-2026:48151 |
| Logging Subsystem for Red Hat OpenShift 6.0 | Fixed | RHSA-2026:50843 |
| Logging Subsystem for Red Hat OpenShift 6.2 | Fixed | RHSA-2026:47952 |
| Logging Subsystem for Red Hat OpenShift 6.4 | Fixed | RHSA-2026:34364 |
| Logging Subsystem for Red Hat OpenShift 6.5 | Fixed | RHSA-2026:56340 |
| Logical Volume Manager Storage 4.12 | Fixed | RHSA-2026:88199 |
| Logical Volume Manager Storage 4.17 | Fixed | RHSA-2026:93598 |
| Multicluster Global Hub 1.4.9 | Fixed | RHSA-2026:41030 |
| Multicluster Global Hub 1.5.8 | Fixed | RHSA-2026:42852 |
| Multicluster Global Hub 1.6.6 | Fixed | RHSA-2026:44622 |
| Multicluster Global Hub 1.7.4 | Fixed | RHSA-2026:47149, RHSA-2026:53530 |
| OpenShift API for Data Protection 1.3 | Fixed | RHSA-2026:51033 |
| OpenShift API for Data Protection 1.4 | Fixed | RHSA-2026:59467 |
| OpenShift API for Data Protection 1.5 | Fixed | RHSA-2026:66022 |
| OpenShift API for Data Protection 1.6 | Fixed | RHSA-2026:43692 |
| OpenShift Compliance Operator 1 | Fixed | RHSA-2026:54500, RHSA-2026:95612 |
| OpenShift Developer Tools and Services 1.6.4 | Fixed | RHSA-2026:51057 |
| OpenShift Security Profiles Operator 1 | Fixed | RHSA-2026:76752 |
| RHEM 1.0 for RHEL 9 | Fixed | RHSA-2026:36796 |
| RHEM 1.1 for RHEL 10 | Fixed | RHSA-2026:41019 |
| RHEM 1.1 for RHEL 9 | Fixed | RHSA-2026:41019 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16 | Fixed | RHSA-2026:57191 |
| Red Hat Advanced Cluster Security 4.9 | Fixed | RHSA-2026:36319 |
| Red Hat Advanced Cluster Security for Kubernetes 4.11 | Fixed | RHSA-2026:36207 |
| Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 | Fixed | RHSA-2026:36625 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:42078, RHSA-2026:50319 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:42078, RHSA-2026:50319 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:42132 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Fixed | RHSA-2026:42079 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:42079, RHSA-2026:50336 |
| Red Hat Developer Hub 1.9 | Fixed | RHSA-2026:33574 |
| Red Hat Edge Manager 1.0 | Fixed | RHSA-2026:36651 |
| Red Hat Edge Manager 1.1 | Fixed | RHSA-2026:40118, RHSA-2026:40945 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:22120, RHSA-2026:34357, RHSA-2026:35832, RHSA-2026:39272, RHSA-2026:39573, RHSA-2026:42946, RHSA-2026:65534 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:22112, RHSA-2026:36776, RHSA-2026:38504, RHSA-2026:39266 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:22121, RHSA-2026:34359, RHSA-2026:36617, RHSA-2026:39319, RHSA-2026:65886 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:90726 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:61253, RHSA-2026:67319 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:53412, RHSA-2026:57649, RHSA-2026:72276 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:49702, RHSA-2026:49703, RHSA-2026:51187, RHSA-2026:53413, RHSA-2026:54168, RHSA-2026:61313, RHSA-2026:67149 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:49712, RHSA-2026:53415, RHSA-2026:67287 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:90725 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:90726 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:39573 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:51187 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:54191 |
| Red Hat Hardened Images | Fixed | RHSA-2026:23262, RHSA-2026:23264 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 | Fixed | RHSA-2026:54441 |
| Red Hat Migration Toolkit 1.8 | Fixed | RHSA-2026:41928 |
| Red Hat Migration Toolkit for Applications 8.1 | Fixed | RHSA-2026:50300 |
| Red Hat Migration Toolkit for Applications 8.2 | Fixed | RHSA-2026:43038 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:42644, RHSA-2026:65126, RHSA-2026:87410 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:73987 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:60520, RHSA-2026:84734, RHSA-2026:91248 |
| Red Hat OpenShift AI 3.5 | Fixed | RHSA-2026:91249 |
| Red Hat OpenShift Builds 1.7.3 | Fixed | RHSA-2026:36648 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:56785, RHSA-2026:56789, RHSA-2026:56790 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:56910, RHSA-2026:56912, RHSA-2026:56913 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:56852, RHSA-2026:56855 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:60018, RHSA-2026:60025 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:57482, RHSA-2026:57488 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:54552, RHSA-2026:54556, RHSA-2026:68534 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:54584 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:54602, RHSA-2026:54603 |
| Red Hat OpenShift GitOps 1.19 | Fixed | RHSA-2026:35994 |
| Red Hat OpenShift GitOps 1.20 | Fixed | RHSA-2026:35993 |
| Red Hat OpenShift GitOps 1.21 | Fixed | RHSA-2026:35995 |
| Red Hat OpenShift Service Mesh 3.0 | Fixed | RHSA-2026:33120 |
| Red Hat OpenShift Service Mesh 3.1 | Fixed | RHSA-2026:33123 |
| Red Hat OpenShift Service Mesh 3.2 | Fixed | RHSA-2026:33142 |
| Red Hat OpenShift Service Mesh 3.3 | Fixed | RHSA-2026:33150 |
| Red Hat OpenShift Workload Availability 0.12 | Fixed | RHSA-2026:54287 |
| Red Hat OpenShift Workload Availability 0.13 | Fixed | RHSA-2026:54284 |
| Red Hat OpenShift Workload Availability 0.3 | Fixed | RHSA-2026:54286 |
| Red Hat OpenShift Workload Availability 0.7 | Fixed | RHSA-2026:54285 |
| Red Hat OpenShift Workload Availability 0.8 | Fixed | RHSA-2026:54274 |
| Red Hat OpenShift Workload Availability 5.7 | Fixed | RHSA-2026:54283 |
| Red Hat OpenShift distributed tracing 3.10.1 | Fixed | RHSA-2026:50205 |
| Red Hat OpenStack 1.5 | Fixed | RHSA-2026:77532 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2026:54757, RHSA-2026:95206 |
| Red Hat OpenStack Platform 17.1 | Fixed | RHSA-2026:80684, RHSA-2026:90329 |
| Red Hat OpenStack Services on OpenShift 18.0 | Fixed | RHSA-2026:39810, RHSA-2026:60302 |
| Red Hat Satellite 6.16 for RHEL 8 | Fixed | RHSA-2026:42082 |
| Red Hat Satellite 6.16 for RHEL 9 | Fixed | RHSA-2026:42082 |
| Red Hat Satellite 6.17 for RHEL 9 | Fixed | RHSA-2026:42150 |
| Red Hat Satellite 6.18 | Fixed | RHSA-2026:51341 |
| Red Hat Satellite 6.18 for RHEL 9 | Fixed | RHSA-2026:42151 |
| Red Hat Satellite 6.19 | Fixed | RHSA-2026:51194 |
| Red Hat Satellite 6.19 for RHEL 9 | Fixed | RHSA-2026:42240 |
| Red Hat Trusted Artifact Signer 1.4 | Fixed | RHSA-2026:36797, RHSA-2026:48771 |
| Red Hat Web Terminal 1.11 | Fixed | RHSA-2026:42043 |
| Red Hat Web Terminal 1.12 | Fixed | RHSA-2026:42047 |
| Red Hat Web Terminal 1.13 | Fixed | RHSA-2026:42050 |
| Red Hat Web Terminal 1.14 | Fixed | RHSA-2026:42051 |
| Red Hat Web Terminal 1.15 | Fixed | RHSA-2026:42049 |
| Red Hat Web Terminal 1.16 | Fixed | RHSA-2026:42048 |
| Streams for Apache Kafka 3.2.1 | Fixed | RHSA-2026:54435 |
| multicluster engine for Kubernetes 2.10 | Fixed | RHSA-2026:46885 |
| multicluster engine for Kubernetes 2.11 | Fixed | RHSA-2026:57194 |
| multicluster engine for Kubernetes 2.6 | Fixed | RHSA-2026:41055 |
| multicluster engine for Kubernetes 2.8 | Fixed | RHSA-2026:47735 |
| multicluster engine for Kubernetes 2.9 | Fixed | RHSA-2026:59559 |
Not affected: 107 products
- Cryostat 4 on RHEL 9
- Custom Metric Autoscaler operator for Red Hat Openshift
- File Integrity Operator
- Logging Subsystem for Red Hat OpenShift 6.0
- Logging Subsystem for Red Hat OpenShift 6.2
- Logging Subsystem for Red Hat OpenShift 6.4
- Logging Subsystem for Red Hat OpenShift 6.5
- Logical Volume Manager Storage 4.12
- Logical Volume Manager Storage 4.17
- Multicluster Global Hub 1.4.9
- Multicluster Global Hub 1.5.8
- Multicluster Global Hub 1.6.6
- Multicluster Global Hub 1.7.4
- OpenShift API for Data Protection 1.3
- OpenShift API for Data Protection 1.4
- OpenShift API for Data Protection 1.5
- OpenShift API for Data Protection 1.6
- OpenShift Compliance Operator 1
- OpenShift Security Profiles Operator 1
- OpenShift Service Mesh 2
- OpenShift Service Mesh 3
- RHEM 1.0 for RHEL 9
- RHEM 1.1 for RHEL 10
- RHEM 1.1 for RHEL 9
- Red Hat 3scale API Management Platform 2
- Red Hat AMQ Clients
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Advanced Cluster Management for Kubernetes 2.16
- Red Hat Advanced Cluster Security 4.9
- Red Hat Advanced Cluster Security for Kubernetes 4.11
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Developer Hub 1.9
- Red Hat Edge Manager 1.0
- Red Hat Edge Manager 1.1
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
- Red Hat Migration Toolkit 1.8
- Red Hat Migration Toolkit for Applications 8.1
- Red Hat Migration Toolkit for Applications 8.2
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.3
- Red Hat OpenShift AI 3.4
- Red Hat OpenShift Builds 1.7.3
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenShift Container Platform 4.19
- Red Hat OpenShift Container Platform 4.20
- Red Hat OpenShift Container Platform 4.21
- Red Hat OpenShift Container Platform 5
- Red Hat OpenShift GitOps 1.19
- Red Hat OpenShift GitOps 1.20
- Red Hat OpenShift GitOps 1.21
- Red Hat OpenShift Service Mesh 3.0
- Red Hat OpenShift Service Mesh 3.1
- Red Hat OpenShift Service Mesh 3.2
- Red Hat OpenShift Service Mesh 3.3
- Red Hat OpenShift Virtualization 4
- Red Hat OpenShift Workload Availability 0.12
- Red Hat OpenShift Workload Availability 0.13
- Red Hat OpenShift Workload Availability 0.3
- Red Hat OpenShift Workload Availability 0.7
- Red Hat OpenShift Workload Availability 0.8
- Red Hat OpenShift Workload Availability 5.7
- Red Hat OpenShift distributed tracing 3.10.1
- Red Hat OpenShift for Windows Containers
- Red Hat OpenStack 1.5
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Platform 17.1
- Red Hat OpenStack Services on OpenShift 18.0
- Red Hat Openshift Data Foundation 4
- Red Hat Quay 3
- Red Hat Satellite 6.16 for RHEL 8
- Red Hat Satellite 6.16 for RHEL 9
- Red Hat Satellite 6.17 for RHEL 9
- Red Hat Satellite 6.18 for RHEL 9
- Red Hat Satellite 6.19 for RHEL 9
- Red Hat Service Interconnect 1
- Red Hat Service Interconnect 2
- Red Hat Trusted Artifact Signer 1.4
- Red Hat Web Terminal 1.11
- Red Hat Web Terminal 1.12
- Red Hat Web Terminal 1.13
- Red Hat Web Terminal 1.14
- Red Hat Web Terminal 1.15
- Red Hat Web Terminal 1.16
- Zero Trust Workload Identity Manager
- mirror registry for Red Hat OpenShift 2
- multicluster engine for Kubernetes 2.10
- multicluster engine for Kubernetes 2.11
- multicluster engine for Kubernetes 2.6
- multicluster engine for Kubernetes 2.8
- multicluster engine for Kubernetes 2.9
Timeline
- 2026-10-02 Threatist record created from CVE-2026-33811
- 2026-10-03 Alias added: GHSA-497x-jcxf-m478
- 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
- 2026-10-07 Fix available: RHSA-2026:77532 · Red Hat
- 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
- 2026-10-07 Fix available: OpenShift Security Profiles Operator 1, Red Hat OpenStack 1.5 · Red Hat
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
- 2026-10-13 Fix available: RHSA-2026:80684 · Red Hat
- 2026-10-13 Fix available: Red Hat OpenStack Platform 17.1 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
- 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
- 2026-10-20 Affected versions changed · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
- 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
- 2026-10-23 Fix available: RHSA-2026:88199 · Red Hat
- 2026-10-23 Fix available: Logical Volume Manager Storage 4.12, Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4.11 · Red Hat
- 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
- 2026-10-26 Affected versions changed · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-27 Affected versions changed · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
- 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
- 2026-10-30 Fix available: Red Hat OpenShift AI 3.5 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-10-31 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11, Red Hat OpenShift distributed tracing 3.10.1 · Red Hat
- 2026-11-03 Fix available: RHSA-2026:93598 · Red Hat
- 2026-11-03 Fix available: Logical Volume Manager Storage 4.17 · Red Hat
- 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
- 2026-11-04 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
- 2026-11-05 Affected versions changed · Red Hat
- 2026-11-06 Fix available: Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat
References
More Go standard library Go vulnerabilities
- TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
- TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
- TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
- TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-33811 · CVE Program
- CVE-2026-33811 · NVD
- FIRST EPSS
- GHSA-497x-jcxf-m478 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-33811 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences