Read the docs
TI-2026-27208 Aliases CVE-2026-34986GHSA-78h2-9frx-2jm8

Go JOSE affect by a panic in JWE decryption

Priority MEDIUM 40CWE-248Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 80 fixed, 29 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-248.

Summary

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00663 51st percentileScored 2026-11-07
Fix Partial go-jose (go-jose): 4.1.4, 3.0.5github.com/go-jose/go-jose/v4 (Go): 4.1.4+1 more productRed Hat: 158 advisoriesRed Hat: 80 fixed, 29 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
go-josego-jose4.0.0 to before 4.1.4; before 3.0.54.1.4, 3.0.5Patch availableCNA
—github.com/go-jose/go-jose/v4 (Go)before 4.1.44.1.4Patch availableGHSA-78h2-9frx-2jm8
—github.com/go-jose/go-jose/v3 (Go)before 3.0.53.0.5Patch availableGHSA-78h2-9frx-2jm8
—github.com/go-jose/go-jose (Go)up to 2.6.3—No fix listedGHSA-78h2-9frx-2jm8
  • go-jose Vendorgo-jose Affected 4.0.0 to before 4.1.4; before 3.0.5 Fixed in 4.1.4, 3.0.5 Patch available CNA
  • github.com/go-jose/go-jose/v4 (Go) Vendor— Affected before 4.1.4 Fixed in 4.1.4 Patch available GHSA-78h2-9frx-2jm8
  • github.com/go-jose/go-jose/v3 (Go) Vendor— Affected before 3.0.5 Fixed in 3.0.5 Patch available GHSA-78h2-9frx-2jm8
  • github.com/go-jose/go-jose (Go) Vendor— Affected up to 2.6.3 Fixed in — No fix listed GHSA-78h2-9frx-2jm8

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*3.0.0 to before 3.0.5; 4.0.0 to before 4.1.4VulnerableGo-jose Project
  • cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:* Versions 3.0.0 to before 3.0.5; 4.0.0 to before 4.1.4 Vulnerable ·Go-jose Project

Remediation

  • Fix · CNA go-jose (go-jose) Fixed in 4.1.4, 3.0.5
  • Fix · GHSA-78h2-9frx-2jm8 github.com/go-jose/go-jose/v4 (Go) Fixed in 4.1.4 Advisory →
  • Fix · GHSA-78h2-9frx-2jm8 github.com/go-jose/go-jose/v3 (Go) Fixed in 3.0.5 Advisory →

Red Hat 158 advisories

  • RHSA-2026:89341 Released 2026-10-26 · Red Hat rating Important
    OpenShift Container Platform 4.20.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:83702 Released 2026-10-20 · Red Hat rating Important
    OpenShift Container Platform 4.21.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/insights-runtime-extractor-rhel9, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9, registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel9 +25
  • RHSA-2026:83627 Released 2026-10-15 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.14 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-cli-rhel9, registry.redhat.io/odf4/mcg-core-rhel9 +15
Show 155 more Red Hat advisories
  • RHSA-2026:83619 Released 2026-10-15 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.16 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-core-rhel9, registry.redhat.io/odf4/mcg-rhel9-operator +15
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:70585 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 packages and security update
    • Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-13.rhaos4.17.git3a25d98.el8, cri-o-1.30.14-13.rhaos4.17.git3a25d98.el9, cri-tools-1.30.0-10.el8 +23
  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:67856 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.15.69 packages and security update
    • Red Hat OpenShift Container Platform 4.15 cri-o-1.28.11-17.rhaos4.15.git48e6ddb.el8, cri-o-1.28.11-17.rhaos4.15.git48e6ddb.el9
  • RHSA-2026:67836 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.14.74 packages and security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.8-22.rhaos4.14.git0633bf1.el8, cri-o-1.27.8-22.rhaos4.14.git0633bf1.el9
  • RHSA-2026:66385 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.18.55 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-o-1.31.13-14.rhaos4.18.gitf2de9ac.el8, cri-o-1.31.13-14.rhaos4.18.gitf2de9ac.el9
  • RHSA-2026:65906 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.12.98 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-36.rhaos4.12.git2e7f657.el8
  • RHSA-2026:65838 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 packages and security update
    • Red Hat OpenShift Container Platform 4.13 containernetworking-plugins-1:1.4.0-8.rhaos4.13.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el8, cri-o-1.26.5-32.rhaos4.13.git1088e36.el9 +14
  • RHSA-2026:62548 Released 2026-09-10 · Red Hat rating Important
    OpenShift Container Platform 4.16.70 packages and security update
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.13-14.rhaos4.16.git84cfdc6.el8, cri-o-1.29.13-14.rhaos4.16.git84cfdc6.el9
  • RHSA-2026:62550 Released 2026-09-10 · Red Hat rating Important
    OpenShift Container Platform 4.16.70 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/ose-cli-artifacts-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9 +15
  • RHSA-2026:60023 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9 +20
  • RHSA-2026:60452 Released 2026-09-02 · Red Hat rating Important
    OpenShift Container Platform 4.19.45 packages and security update
    • Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-11.rhaos4.19.git089e95c.el9
  • RHSA-2026:62260 Released 2026-09-01 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.30.0 Release.
    • Red Hat OpenShift Dev Spaces 3.30 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/configbump-rhel9, registry.redhat.io/devspaces/dashboard-rhel9 +7
  • RHSA-2026:60449 Released 2026-09-01 · Red Hat rating Important
    OpenShift Container Platform 4.21.31 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-o-1.34.11-4.rhaos4.21.git358c4b4.el9
  • RHSA-2026:60444 Released 2026-09-01 · Red Hat rating Important
    OpenShift Container Platform 4.20.36 packages and security update
    • Red Hat OpenShift Container Platform 4.20 cri-o-1.33.13-5.rhaos4.20.git7ebc848.el9
  • RHSA-2026:57408 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.19.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9 +9
  • RHSA-2026:57487 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9, registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator +2
  • RHSA-2026:57590 Released 2026-08-20 · Red Hat rating Important
    rh-podman-desktop security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Extensions Channel (v. 10) rh-podman-desktop-1.1.2-1.el10_2
  • RHSA-2026:57013 Released 2026-08-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2026:56968 Released 2026-08-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.21 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +22
  • RHSA-2026:56431 Released 2026-08-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.18.27 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:56366 Released 2026-08-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:54602 Released 2026-08-18 · Red Hat rating Important
    OpenShift Container Platform 4.21.29 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-cli-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-haproxy-router-rhel9 +6
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:48676 Released 2026-08-04 · Red Hat rating Critical
    OpenShift Container Platform 4.20.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9, registry.redhat.io/openshift4/ose-hypershift-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
  • RHSA-2026:49944 Released 2026-08-04 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.8-1.module+el8.8.0+24545+b713e821.src::container-tools:rhel8 +47
  • RHSA-2026:48790 Released 2026-07-31 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-1.el8_10, osbuild-composer-core-101.5-1.el8_10, osbuild-composer-worker-101.5-1.el8_10
  • RHSA-2026:48085 Released 2026-07-29 · Red Hat rating Important
    Red Hat Quay 3.18.0
    • Red Hat Quay 3.18 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:47952 Released 2026-07-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.12
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:47388 Released 2026-07-28 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:44267 Released 2026-07-28 · Red Hat rating Important
    OpenShift Container Platform 4.21.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +1
  • RHSA-2026:46885 Released 2026-07-27 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.10.4 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
  • RHSA-2026:41944 Released 2026-07-20 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:41941 Released 2026-07-20 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:40984 Released 2026-07-16 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2026:37387 Released 2026-07-09 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.22 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +24
  • RHSA-2026:34099 Released 2026-07-09 · Red Hat rating Important
    OpenShift Container Platform 4.17.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:36820 Released 2026-07-08 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.29.0 Release.
    • Red Hat OpenShift Dev Spaces 3.29 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/multicluster-redirector-rhel9 +6
  • RHSA-2026:34794 Released 2026-07-07 · Red Hat rating Important
    OpenShift Container Platform 4.22.4 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9, registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +4
  • RHSA-2026:35833 Released 2026-07-06 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24482+e50f4e4f.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24482+e50f4e4f.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24482+e50f4e4f.s390x::container-tools:rhel8 +47
  • RHSA-2026:34364 Released 2026-07-01 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.4.6
    • Logging Subsystem for Red Hat OpenShift 6.4 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +2
  • RHSA-2026:34196 Released 2026-07-01 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) podman-4:4.9.4-20.el9_4.3, podman-docker-4:4.9.4-20.el9_4.3, podman-plugins-4:4.9.4-20.el9_4.3 +2
  • RHSA-2026:34197 Released 2026-07-01 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) skopeo-2:1.14.6-1.el9_4, skopeo-tests-2:1.14.6-1.el9_4
  • RHSA-2026:34192 Released 2026-07-01 · Red Hat rating Important
    buildah security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) buildah-2:1.33.15-1.el9_4.1, buildah-tests-2:1.33.15-1.el9_4.1
  • RHSA-2026:33722 Released 2026-06-30 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24321+617e8352.src::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.aarch64::container-tools:rhel8, buildah-2:1.33.14-3.module+el8.10.0+24321+617e8352.ppc64le::container-tools:rhel8 +47
  • RHSA-2026:32991 Released 2026-06-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.2, osbuild-composer-core-101.3-4.el9_4.2, osbuild-composer-worker-101.3-4.el9_4.2
  • RHSA-2026:30650 Released 2026-06-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.8 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:29854 Released 2026-06-25 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:27001 Released 2026-06-24 · Red Hat rating Important
    OpenShift Container Platform 4.18.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9, registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel9 +2
  • RHSA-2026:27004 Released 2026-06-24 · Red Hat rating Important
    OpenShift Container Platform 4.19.35 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9 +2
  • RHSA-2026:28198 Released 2026-06-23 · Red Hat rating Important
    Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-rhel8 +1
  • RHSA-2026:27063 Released 2026-06-23 · Red Hat rating Important
    OpenShift Container Platform 4.20.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +3
  • RHSA-2026:27044 Released 2026-06-23 · Red Hat rating Important
    OpenShift Container Platform 4.21.21 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-haproxy-router-rhel9, registry.redhat.io/openshift4/ose-installer-artifacts-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
  • RHSA-2026:27856 Released 2026-06-22 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-9.el10_0, osbuild-composer-core-134.1-9.el10_0, osbuild-composer-worker-134.1-9.el10_0
  • RHSA-2026:26636 Released 2026-06-17 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9 +1
  • RHSA-2026:26585 Released 2026-06-17 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.15
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9
  • RHSA-2026:26568 Released 2026-06-17 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +7
  • RHSA-2026:25187 Released 2026-06-16 · Red Hat rating Important
    OpenShift Container Platform 4.21.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9 +4
  • RHSA-2026:25206 Released 2026-06-16 · Red Hat rating Important
    OpenShift Container Platform 4.22.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-installer-artifacts-rhel9, registry.redhat.io/openshift4/ose-oauth-server-rhel9
  • RHSA-2026:25194 Released 2026-06-16 · Red Hat rating Important
    OpenShift Container Platform 4.20.25 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator +9
  • RHSA-2026:26054 Released 2026-06-15 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-8.el9_6, osbuild-composer-core-132.2-8.el9_6, osbuild-composer-worker-132.2-8.el9_6
  • RHSA-2026:25252 Released 2026-06-11 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.7-1.el9_2.5, buildah-tests-1:1.29.7-1.el9_2.5
  • RHSA-2026:25250 Released 2026-06-11 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.6, skopeo-tests-2:1.11.4-0.1.el9_2.6
  • RHSA-2026:25248 Released 2026-06-11 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.11, podman-docker-2:4.4.1-22.el9_2.11, podman-gvproxy-2:4.4.1-22.el9_2.11 +3
  • RHSA-2026:23241 Released 2026-06-11 · Red Hat rating Important
    OpenShift Container Platform 4.21.19 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator, registry.redhat.io/openshift4/ose-haproxy-router-rhel9 +2
  • RHSA-2026:25127 Released 2026-06-10 · Red Hat rating Important
    Submariner v0.21 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
  • RHSA-2026:24977 Released 2026-06-10 · Red Hat rating Important
    RHOAI 2.25.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +34
  • RHSA-2026:24853 Released 2026-06-09 · Red Hat rating Important
    Red Hat Quay 3.15.5
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:24484 Released 2026-06-08 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.21.2
    • Red Hat OpenShift Pipelines 1.21 serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_darwin, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_windows +5
  • RHSA-2026:24482 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
  • RHSA-2026:24479 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/fulcio-rhel9, registry.redhat.io/rhtas/rekor-backfill-redis-rhel9 +5
  • RHSA-2026:24477 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/rekor-monitor-rhel9
  • RHSA-2026:24475 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/createtree-rhel9
  • RHSA-2026:24471 Released 2026-06-08 · Red Hat rating Important
    RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/rhtas-console-rhel9, registry.redhat.io/rhtas/rhtas-console-ui-rhel9
  • RHSA-2026:23361 Released 2026-06-04 · Red Hat rating Important
    Red Hat Quay 3.9.22
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:23345 Released 2026-06-04 · Red Hat rating Important
    Multicluster Global Hub 1.6.2 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:23228 Released 2026-06-04 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8
  • RHSA-2026:22937 Released 2026-06-03 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2
  • RHSA-2026:21703 Released 2026-06-03 · Red Hat rating Important
    OpenShift Container Platform 4.20.24 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9 +22
  • RHSA-2026:22840 Released 2026-06-03 · Red Hat rating Important
    Red Hat Quay 3.10.22
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:22714 Released 2026-06-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-2.el9_8, osbuild-composer-core-165.1-2.el9_8, osbuild-composer-worker-165.1-2.el9_8
  • RHSA-2026:22629 Released 2026-06-02 · Red Hat rating Important
    Red Hat Quay 3.12.18
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:22465 Released 2026-06-02 · Red Hat rating Important
    Red Hat Quay 3.17.2
    • Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:22450 Released 2026-06-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-2.el10_2, osbuild-composer-core-165.1-2.el10_2, osbuild-composer-worker-165.1-2.el10_2
  • RHSA-2026:21709 Released 2026-06-02 · Red Hat rating Important
    OpenShift Container Platform 4.21.18 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9 +6
  • RHSA-2026:22423 Released 2026-06-02 · Red Hat rating Important
    Multicluster Global Hub 1.3.4 security update
    • Multicluster Global Hub 1.3.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:22347 Released 2026-06-01 · Red Hat rating Important
    Multicluster Global Hub 1.4.5 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:22260 Released 2026-06-01 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.7
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:22258 Released 2026-06-01 · Red Hat rating Important
    Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.7
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-service-8-rhel8
  • RHSA-2026:21932 Released 2026-05-29 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.20.5
    • Red Hat OpenShift Pipelines 1.20 registry.redhat.io/openshift-pipelines/pipelines-operator-bundle
  • RHSA-2026:21931 Released 2026-05-29 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.20.5
    • Red Hat OpenShift Pipelines 1.20 registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9, registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9
  • RHSA-2026:21769 Released 2026-05-28 · Red Hat rating Important
    Multicluster Global Hub 1.5.4 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:20041 Released 2026-05-27 · Red Hat rating Important
    OpenShift Container Platform 4.19.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:21017 Released 2026-05-26 · Red Hat rating Important
    Red Hat Quay 3.14.8
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:20946 Released 2026-05-26 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.18.6 security update
    • Red Hat OpenShift GitOps 1.18 registry.redhat.io/openshift-gitops-1/console-plugin-rhel8, registry.redhat.io/openshift-gitops-1/dex-rhel8, registry.redhat.io/openshift-gitops-1/gitops-rhel8
  • RHSA-2026:20034 Released 2026-05-26 · Red Hat rating Important
    OpenShift Container Platform 4.21.17 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9, registry.redhat.io/openshift4/ose-cluster-api-rhel9 +15
  • RHSA-2026:20607 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) buildah-2:1.39.9-1.el9_6, buildah-tests-2:1.39.9-1.el9_6
  • RHSA-2026:20609 Released 2026-05-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) skopeo-2:1.18.1-5.el9_6.1, skopeo-tests-2:1.18.1-5.el9_6.1
  • RHSA-2026:17789 Released 2026-05-26 · Red Hat rating Important
    Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-reports-rhel9 +4
  • RHSA-2026:20569 Released 2026-05-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) buildah-2:1.39.9-1.el10_0, buildah-tests-2:1.39.9-1.el10_0
  • RHSA-2026:19720 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.144.0-2.el9_6
  • RHSA-2026:19721 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.144.0-2.el9_4
  • RHSA-2026:19719 Released 2026-05-20 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.144.0-2.el10_0
  • RHSA-2026:19712 Released 2026-05-20 · Red Hat rating Critical
    RHOAI 3.3.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +33
  • RHSA-2026:17598 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:17448 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.18.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel9, registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9, registry.redhat.io/openshift4/ose-openstack-cinder-csi-driver-rhel9-operator +1
  • RHSA-2026:17468 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.20.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/azure-service-rhel9-operator, registry.redhat.io/openshift4/kube-metrics-server-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9 +14
  • RHSA-2026:19353 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.144.0-2.el9_8
  • RHSA-2026:19375 Released 2026-05-19 · Red Hat rating Important
    Red Hat Quay 3.16.4
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:19173 Released 2026-05-19 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-1.el9_8, podman-docker-6:5.8.2-1.el9_8, podman-plugins-6:5.8.2-1.el9_8 +2
  • RHSA-2026:19186 Released 2026-05-19 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.1-1.el9_8, buildah-tests-2:1.43.1-1.el9_8
  • RHSA-2026:19135 Released 2026-05-19 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.144.0-2.el10_2
  • RHSA-2026:19108 Released 2026-05-19 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.11.2
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9, registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:19017 Released 2026-05-19 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-1.el10_2, podman-docker-7:5.8.2-1.el10_2, podman-remote-7:5.8.2-1.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-1.el10_2
  • RHSA-2026:19099 Released 2026-05-19 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9, registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:17474 Released 2026-05-19 · Red Hat rating Important
    OpenShift Container Platform 4.21.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator, registry.redhat.io/openshift4/kube-metrics-server-rhel9 +13
  • RHSA-2026:18585 Released 2026-05-19 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.9.4
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9, registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:18584 Released 2026-05-19 · Red Hat rating Important
    Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.9.4
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/assisted-service-8-rhel8
  • RHSA-2026:17550 Released 2026-05-14 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.17.24 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.17 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:17547 Released 2026-05-14 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.18.20 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
  • RHSA-2026:17459 Released 2026-05-14 · Red Hat rating Important
    Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.11
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel8, registry.redhat.io/multicluster-engine/assisted-installer-rhel8 +1
  • RHSA-2026:17458 Released 2026-05-14 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.11
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:17287 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) podman-5:5.4.0-20.el9_6.3, podman-docker-5:5.4.0-20.el9_6.3, podman-plugins-5:5.4.0-20.el9_6.3 +2
  • RHSA-2026:17123 Released 2026-05-13 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.6
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9 +1
  • RHSA-2026:17121 Released 2026-05-13 · Red Hat rating Important
    Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.6
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/assisted-service-8-rhel8
  • RHSA-2026:17040 Released 2026-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) podman-6:5.4.0-15.el10_0.1, podman-docker-6:5.4.0-15.el10_0.1, podman-remote-6:5.4.0-15.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) podman-tests-6:5.4.0-15.el10_0.1
  • RHSA-2026:16696 Released 2026-05-13 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) skopeo-2:1.18.1-3.el10_0.1, skopeo-tests-2:1.18.1-3.el10_0.1
  • RHSA-2026:13829 Released 2026-05-05 · Red Hat rating Important
    RHACS 4.10.2 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
  • RHSA-2026:13791 Released 2026-05-05 · Red Hat rating Important
    RHACS 4.9.6 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2026:12279 Released 2026-04-30 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:12277 Released 2026-04-30 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.10 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2026:12116 Released 2026-04-30 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.2
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9 +1
  • RHSA-2026:11996 Released 2026-04-30 · Red Hat rating Important
    Red Hat Quay 3.9.21
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:11916 Released 2026-04-29 · Red Hat rating Important
    Red Hat Quay 3.10.21
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:11856 Released 2026-04-29 · Red Hat rating Important
    Red Hat Quay 3.12.17
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:11688 Released 2026-04-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 2.6.15
    • Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/istio-cni-rhel8, registry.redhat.io/openshift-service-mesh/istio-rhel8-operator, registry.redhat.io/openshift-service-mesh/pilot-rhel8 +1
  • RHSA-2026:11512 Released 2026-04-29 · Red Hat rating Important
    Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.7.10
    • multicluster engine for Kubernetes 2.7 registry.redhat.io/multicluster-engine/assisted-installer-agent-rhel9, registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
  • RHSA-2026:11217 Released 2026-04-27 · Red Hat rating Important
    RHACS 4.8.11 security and bug fix update
    • Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8 +2
  • RHSA-2026:11070 Released 2026-04-27 · Red Hat rating Important
    RHACS 4.8.11 security and bug fix update
    • Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8 +2
  • RHSA-2026:10135 Released 2026-04-24 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.41.8-3.el9_7, buildah-tests-2:1.41.8-3.el9_7
  • RHSA-2026:10175 Released 2026-04-23 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.27.1 Release.
    • Red Hat OpenShift Dev Spaces 3.27 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/devspaces-rhel9-operator +8
  • RHSA-2026:10130 Released 2026-04-23 · Red Hat rating Important
    RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9 +2
  • RHSA-2026:10125 Released 2026-04-23 · Red Hat rating Important
    RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/client-server-rhel9
  • RHSA-2026:9453 Released 2026-04-21 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.4
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:9448 Released 2026-04-21 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.7
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:9388 Released 2026-04-21 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.9.2 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9
  • RHSA-2026:9385 Released 2026-04-21 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
    • Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:8493 Released 2026-04-16 · Red Hat rating Critical
    Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:8491 Released 2026-04-16 · Red Hat rating Critical
    Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:8490 Released 2026-04-16 · Red Hat rating Critical
    Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Kernel Module Management Operator for Red Hat OpenshiftAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix yet
Migration Toolkit for VirtualizationAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Multicluster Global HubAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Build of Podman Desktop - Tech PreviewAffectedNo fix planned: Will not fix
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix yet
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix yet
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354
Cryostat 4 on RHEL 9Fixed RHSA-2026:17789
Custom Metric Autoscaler 2.19Fixed RHSA-2026:26636
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:26585
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:47952
Logging Subsystem for Red Hat OpenShift 6.4Fixed RHSA-2026:34364
Multicluster Global Hub 1.3.4Fixed RHSA-2026:22423
Multicluster Global Hub 1.4.9Fixed RHSA-2026:22347
Multicluster Global Hub 1.5.8Fixed RHSA-2026:21769
Multicluster Global Hub 1.6.6Fixed RHSA-2026:23345
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:29854
OpenShift API for Data Protection 1.5Fixed RHSA-2026:26568
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:25127
Red Hat Advanced Cluster Security 4.8Fixed RHSA-2026:11070, RHSA-2026:11217
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:13791
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Fixed RHSA-2026:13829
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:19017, RHSA-2026:19135, RHSA-2026:22450, RHSA-2026:22937
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:33722, RHSA-2026:35833, RHSA-2026:48790
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:10135, RHSA-2026:19173, RHSA-2026:19186, RHSA-2026:19353, RHSA-2026:22714, RHSA-2026:23228
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:49944
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:25248, RHSA-2026:25250, RHSA-2026:25252
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:32991, RHSA-2026:34192, RHSA-2026:34196, RHSA-2026:34197
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:16696, RHSA-2026:17040, RHSA-2026:19719, RHSA-2026:20569, RHSA-2026:27856
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:19721
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:17287, RHSA-2026:19720, RHSA-2026:20607, RHSA-2026:20609, RHSA-2026:26054
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:49944
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:19017
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:17040
Red Hat Enterprise Linux Extensions Channel (v. 10)Fixed RHSA-2026:57590
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat OpenShift AI 2.25Fixed RHSA-2026:24977
Red Hat OpenShift AI 3.3Fixed RHSA-2026:19712, RHSA-2026:73987
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:65906
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:65838
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:67836
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:67856
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:62548, RHSA-2026:62550
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17598, RHSA-2026:34099, RHSA-2026:60023, RHSA-2026:70585
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:17448, RHSA-2026:27001, RHSA-2026:57487, RHSA-2026:66385
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:20041, RHSA-2026:27004, RHSA-2026:57408, RHSA-2026:60452
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:17468, RHSA-2026:21703, RHSA-2026:25194, RHSA-2026:27063, RHSA-2026:48676, RHSA-2026:60444, RHSA-2026:89341
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:17474, RHSA-2026:20034, RHSA-2026:21709, RHSA-2026:23241, RHSA-2026:25187, RHSA-2026:27044, RHSA-2026:44267, RHSA-2026:54602, RHSA-2026:60449, RHSA-2026:83702
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:25206, RHSA-2026:34794
Red Hat OpenShift Dev Spaces 3.27Fixed RHSA-2026:10175
Red Hat OpenShift Dev Spaces 3.29Fixed RHSA-2026:36820
Red Hat OpenShift Dev Spaces 3.30Fixed RHSA-2026:62260
Red Hat OpenShift GitOps 1.18Fixed RHSA-2026:20946
Red Hat OpenShift Pipelines 1.20Fixed RHSA-2026:21931, RHSA-2026:21932
Red Hat OpenShift Pipelines 1.21Fixed RHSA-2026:24484
Red Hat OpenShift Service Mesh 2.6Fixed RHSA-2026:11688
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:8490, RHSA-2026:9448
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:8491, RHSA-2026:9453
Red Hat OpenShift Service Mesh 3.3Fixed RHSA-2026:8493
Red Hat OpenShift distributed tracing 3.9.3Fixed RHSA-2026:9385, RHSA-2026:9388
Red Hat Openshift Data Foundation 4.14Fixed RHSA-2026:83627
Red Hat Openshift Data Foundation 4.16Fixed RHSA-2026:83619
Red Hat Openshift Data Foundation 4.17Fixed RHSA-2026:17550
Red Hat Openshift Data Foundation 4.18Fixed RHSA-2026:17547, RHSA-2026:41941, RHSA-2026:56431
Red Hat Openshift Data Foundation 4.19Fixed RHSA-2026:12279, RHSA-2026:41944, RHSA-2026:56366
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2026:12277, RHSA-2026:40984, RHSA-2026:57013
Red Hat Openshift Data Foundation 4.21Fixed RHSA-2026:56968
Red Hat Openshift Data Foundation 4.22Fixed RHSA-2026:37387
Red Hat Quay 3.10Fixed RHSA-2026:11916, RHSA-2026:22840
Red Hat Quay 3.12Fixed RHSA-2026:11856, RHSA-2026:22629
Red Hat Quay 3.14Fixed RHSA-2026:21017
Red Hat Quay 3.15Fixed RHSA-2026:24853
Red Hat Quay 3.16Fixed RHSA-2026:19375
Red Hat Quay 3.17Fixed RHSA-2026:22465
Red Hat Quay 3.18Fixed RHSA-2026:48085
Red Hat Quay 3.9Fixed RHSA-2026:11996, RHSA-2026:23361
Red Hat Trusted Artifact Signer 1.3Fixed RHSA-2026:10125, RHSA-2026:10130, RHSA-2026:24471, RHSA-2026:24475, RHSA-2026:24477, RHSA-2026:24479, RHSA-2026:24482
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:12116, RHSA-2026:19099, RHSA-2026:46885
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:19108
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:17458, RHSA-2026:17459, RHSA-2026:28198
multicluster engine for Kubernetes 2.7Fixed RHSA-2026:11512
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:17121, RHSA-2026:17123, RHSA-2026:22258, RHSA-2026:22260, RHSA-2026:30650
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:18584, RHSA-2026:18585
Not affected: 91 products
  • Cryostat 4 on RHEL 9
  • Custom Metric Autoscaler 2.19
  • External Secrets Operator for Red Hat OpenShift
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.4
  • Logical Volume Manager Storage
  • Migration Toolkit for Containers
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.3.4
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability Operator
  • Node HealthCheck Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Lightspeed
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 2
  • OpenShift Service Mesh 3
  • Power monitoring for Red Hat OpenShift
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Security 4
  • Red Hat Advanced Cluster Security 4.8
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
  • Red Hat Ansible Automation Platform 2
  • Red Hat Build of Kueue
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Migration Toolkit 1.8
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces 3.27
  • Red Hat OpenShift Dev Spaces 3.29
  • Red Hat OpenShift Dev Spaces 3.30
  • Red Hat OpenShift GitOps 1.18
  • Red Hat OpenShift Pipelines 1.20
  • Red Hat OpenShift Service Mesh 2.6
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift Service Mesh 3.3
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.9.3
  • Red Hat OpenShift for Windows Containers
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.14
  • Red Hat Openshift Data Foundation 4.16
  • Red Hat Openshift Data Foundation 4.17
  • Red Hat Openshift Data Foundation 4.18
  • Red Hat Openshift Data Foundation 4.19
  • Red Hat Openshift Data Foundation 4.20
  • Red Hat Openshift Data Foundation 4.21
  • Red Hat Openshift Data Foundation 4.22
  • Red Hat Quay 3
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.14
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.17
  • Red Hat Quay 3.18
  • Red Hat Quay 3.9
  • Red Hat Trusted Artifact Signer
  • Red Hat Trusted Artifact Signer 1.3
  • Zero Trust Workload Identity Manager
  • cert-manager Operator for Red Hat OpenShift
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.7
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-34986
  2. 2026-10-03 Alias added: GHSA-78h2-9frx-2jm8
  3. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
  4. 2026-10-07 Fix available: Red Hat OpenShift Pipelines 1.20 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  6. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1 · Red Hat
  7. 2026-10-14 EPSS moved to the 50th–90th percentile
  8. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  11. 2026-10-16 Fix available: RHSA-2026:83619 · Red Hat
  12. 2026-10-16 Fix available: RHSA-2026:83627 · Red Hat
  13. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 +2 · Red Hat
  14. 2026-10-20 Fix available: RHSA-2026:83702 · Red Hat
  15. 2026-10-20 Affected versions changed · Red Hat
  16. 2026-10-29 Affected versions changed · Red Hat
  17. 2026-10-30 Fix available: RHSA-2026:89341 · Red Hat
  18. 2026-10-30 Affected versions changed · Red Hat
  19. 2026-10-30 Affected versions changed · Red Hat
  20. 2026-11-05 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat

References

Advisory 2

Other 2

  • TI-2026-80925 Denial of service in go-jose when parsing JWKs with RSA keys CVSS 3.1HIGH 7.5
  • TI-2026-80924 Go JOSE: Panics in JSON parsing CVSS 4.0MEDIUM 6.9
  • TI-2026-80923 Panic in Go JOSE CBC-HMAC decryption enables denial of service CVSS 4.0MEDIUM 6.9
  • TI-2025-20001 Go JOSE's Parsing Vulnerable to Denial of Service CVSS 4.0MEDIUM 6.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences