Read the docs
TI-2026-30787 Aliases CVE-2026-42504GHSA-h524-452v-82p9

Quadratic complexity in WordDecoder.DecodeHeader in mime

Priority MEDIUM 40CWE-407Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 92 fixed, 44 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-407.

Summary

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0056 46th percentileScored 2026-11-07
Fix Partial mime (Go standard library): 1.25.11, 1.26.4Red Hat: 155 advisoriesRed Hat: 92 fixed, 44 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarymimebefore 1.25.11; 1.26.0-0 to before 1.26.41.25.11, 1.26.4Patch availableCNA
  • mime VendorGo standard library Affected before 1.25.11; 1.26.0-0 to before 1.26.4 Fixed in 1.25.11, 1.26.4 Patch available CNA

Remediation

  • Fix · CNA mime (Go standard library) Fixed in 1.25.11, 1.26.4

Red Hat 155 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:95591 Released 2026-11-05 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95576 Released 2026-11-05 · Red Hat rating Important
    Release of containers for RHOSO 18.0.22
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +23
Show 152 more Red Hat advisories
  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
  • RHSA-2026:95206 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:95081 Released 2026-11-04 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:91191 Released 2026-10-29 · Red Hat rating Important
    Red Hat build of MicroShift 4.19.53 security update
    • Red Hat OpenShift Container Platform 4.19 microshift-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-release-info-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9 +12
  • RHSA-2026:92372 Released 2026-10-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-10.el9_2, osbuild-composer-core-76.1-10.el9_2, osbuild-composer-dnf-json-76.1-10.el9_2 +1
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
  • RHSA-2026:91958 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.7, osbuild-composer-core-101.3-4.el9_4.7, osbuild-composer-worker-101.3-4.el9_4.7
  • RHSA-2026:91587 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-13.el9_6, osbuild-composer-core-132.2-13.el9_6, osbuild-composer-worker-132.2-13.el9_6
  • RHSA-2026:91613 Released 2026-10-28 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:90332 Released 2026-10-26 · Red Hat rating Important
    RHOSO 18.0 os-diff security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:82810 Released 2026-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.15.70 packages and security update
    • Red Hat OpenShift Container Platform 4.15 openshift-4.15.0-202610071830.p2.g5cb2ef4.assembly.stream.el8, openshift-4.15.0-202610071830.p2.g5cb2ef4.assembly.stream.el9, openshift-clients-4.15.0-202610071830.p2.g8231637.assembly.stream.el8 +11
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:88199 Released 2026-10-22 · Red Hat rating Important
    LVMS 4.12 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.12 registry.redhat.io/lvms4/lvms-rhel8-operator
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:83631 Released 2026-10-19 · Red Hat rating Important
    Red Hat build of MicroShift 4.16.73 security update
    • Red Hat OpenShift Container Platform 4.16 microshift-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9, microshift-greenboot-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9, microshift-multus-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9 +6
  • RHSA-2026:77319 Released 2026-10-15 · Red Hat rating Important
    OpenShift Container Platform 4.13.72 packages and security update
    • Red Hat OpenShift Container Platform 4.13 cri-o-1.26.5-33.rhaos4.13.git1088e36.el8, cri-o-1.26.5-33.rhaos4.13.git1088e36.el9
  • RHSA-2026:80167 Released 2026-10-15 · Red Hat rating Important
    Red Hat build of MicroShift 4.18.57 security update
    • Red Hat OpenShift Container Platform 4.18 microshift-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9, microshift-gateway-api-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9, microshift-gateway-api-release-info-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9 +9
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:80684 Released 2026-10-12 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:74797 Released 2026-10-08 · Red Hat rating Important
    Red Hat build of MicroShift 4.20.41 security update
    • Red Hat OpenShift Container Platform 4.20 microshift-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9, microshift-ai-model-serving-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9, microshift-ai-model-serving-release-info-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9 +14
  • RHSA-2026:77532 Released 2026-10-07 · Red Hat rating Important
    Release of components for Service Telemetry Framework 1.5.7
    • Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/sg-core-rhel9
  • RHSA-2026:74796 Released 2026-10-06 · Red Hat rating Important
    Red Hat build of MicroShift 4.21.36 security update
    • Red Hat OpenShift Container Platform 4.21 microshift-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9, microshift-ai-model-serving-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9, microshift-ai-model-serving-release-info-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9 +16
  • RHSA-2026:76795 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-28.el9_4, grafana-selinux-9.2.10-28.el9_4
  • RHSA-2026:76809 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-13.el9_2
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:70614 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.18.56 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-o-1.31.13-16.rhaos4.18.gitfccfa27.el8, cri-o-1.31.13-16.rhaos4.18.gitfccfa27.el9, cri-tools-1.31.1-8.el8 +23
  • RHSA-2026:74506 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.16.14 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 foreman-3.12.0.23-1.el8sat, foreman-cli-3.12.0.23-1.el8sat, foreman-debug-3.12.0.23-1.el8sat +32
    • Red Hat Satellite 6.16 for RHEL 9 foreman-3.12.0.23-1.el9sat, foreman-cli-3.12.0.23-1.el9sat, foreman-debug-3.12.0.23-1.el9sat +32
  • RHSA-2026:74505 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.17.12 Async Update
    • Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.22-1.el9sat, foreman-cli-3.14.0.22-1.el9sat, foreman-debug-3.14.0.22-1.el9sat +31
  • RHSA-2026:74504 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.18.10 Async Update
    • Red Hat Satellite 6.18 for RHEL 9 foreman-3.16.0.25-1.el9sat, foreman-cli-3.16.0.25-1.el9sat, foreman-debug-3.16.0.25-1.el9sat +26
  • RHSA-2026:74632 Released 2026-10-01 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:74609 Released 2026-10-01 · Red Hat rating Important
    Cluster Observability Operator 1.5.3
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +13
  • RHSA-2026:70645 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.99 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8, cri-o-1.25.5-8.rhaos4.12.git6120b13.el9, cri-tools-1.25.0-7.el9 +9
  • RHSA-2026:74503 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.19.5 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 foreman-3.18.0.14-1.el9sat, foreman-cli-3.18.0.14-1.el9sat, foreman-debug-3.18.0.14-1.el9sat +19
  • RHSA-2026:74511 Released 2026-10-01 · Red Hat rating Important
    Red Hat Quay 3.17.5
    • Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:70587 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:73538 Released 2026-09-29 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:71443 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.21.35 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-o-1.34.14-7.rhaos4.21.gitdcc865d.el9, openshift-4.21.0-202609170630.p2.g601ff80.assembly.stream.el10, openshift-4.21.0-202609170630.p2.g601ff80.assembly.stream.el8 +15
  • RHSA-2026:71450 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.20.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:71453 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.21.35 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:72885 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +2
  • RHSA-2026:72882 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/thanos-rhel9
  • RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
  • RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
  • RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
  • RHSA-2026:67934 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 packages and security update
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.13-15.rhaos4.16.git84cfdc6.el8, cri-o-1.29.13-15.rhaos4.16.git84cfdc6.el9, cri-tools-1.29.0-9.el8 +23
  • RHSA-2026:67936 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:71179 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9 +10
  • RHSA-2026:71114 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.33-1.el8ap, automation-gateway-proxy-server-2.5.10-8.el8ap, automation-gateway-server-2.5.20260923-1.el8ap +3
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.33-1.el9ap, automation-gateway-proxy-server-2.6.17-3.el9ap, automation-gateway-server-2.5.20260923-1.el9ap +3
  • RHSA-2026:71113 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 python-sqlparse-0.6.0-1.el10ap, python3-sqlparse-0.6.0-1.el10ap, receptor-1.6.8-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.17-1.el9ap, automation-controller-cli-4.7.17-1.el9ap, automation-controller-server-4.7.17-1.el9ap +7
  • RHSA-2026:68534 Released 2026-09-23 · Red Hat rating Important
    OpenShift Container Platform 4.19.48 packages and security update
    • Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-14.rhaos4.19.git3c1400a.el9, openshift-4.19.0-202609141900.p2.g63adf01.assembly.stream.el9, openshift-clients-4.19.0-202609141900.p2.ga2c805b.assembly.stream.el8 +11
  • RHSA-2026:70267 Released 2026-09-22 · Red Hat rating Important
    Red Hat Quay 3.14.9
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:68552 Released 2026-09-22 · Red Hat rating Important
    OpenShift Container Platform 4.22.15 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:69308 Released 2026-09-21 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2.3
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:68780 Released 2026-09-17 · Red Hat rating Critical
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:68681 Released 2026-09-17 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.17 update
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-registry-rhel8, registry.redhat.io/rhmtc/openshift-migration-ui-rhel8
  • RHSA-2026:68527 Released 2026-09-17 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.152.1-2.el9_4
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:67975 Released 2026-09-16 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.152.1-2.el9_6
  • RHSA-2026:67974 Released 2026-09-16 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.152.1-2.el10_0
  • RHSA-2026:68044 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:67518 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-23.el9_6, grafana-selinux-10.2.6-23.el9_6
  • RHSA-2026:66350 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 packages and security update
    • Red Hat OpenShift Container Platform 4.21 openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el10, openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el8, openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el9 +20
  • RHSA-2026:67517 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-26.el10_0, grafana-selinux-10.2.6-26.el10_0
  • RHSA-2026:66375 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.20.38 packages and security update
    • Red Hat OpenShift Container Platform 4.20 openshift-4.20.0-202609041738.p2.g4012064.assembly.stream.el8, openshift-4.20.0-202609041738.p2.g4012064.assembly.stream.el9, openshift-hyperkube-4.20.0-202609041738.p2.g4012064.assembly.stream.el8 +9
  • RHSA-2026:66352 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:67279 Released 2026-09-14 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/controller-rhel9, registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9 +7
  • RHSA-2026:67148 Released 2026-09-14 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-3.el8_10, osbuild-composer-core-101.5-3.el8_10, osbuild-composer-worker-101.5-3.el8_10
  • RHSA-2026:67159 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-9.el9_4
  • RHSA-2026:67160 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.2
  • RHSA-2026:66327 Released 2026-09-10 · Red Hat rating Important
    osbuild-composer security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-12.el10_0, osbuild-composer-core-134.1-12.el10_0, osbuild-composer-worker-134.1-12.el10_0
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:65886 Released 2026-09-09 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8.2
  • RHSA-2026:65895 Released 2026-09-09 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-3.el10_2.2, osbuild-composer-core-165.1-3.el10_2.2, osbuild-composer-worker-165.1-3.el10_2.2
  • RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
  • RHSA-2026:63091 Released 2026-09-08 · Red Hat rating Important
    OpenShift Container Platform 4.22.13 packages and security update
    • Red Hat OpenShift Container Platform 4.22 ose-crio-credential-provider-4.22.0-202608271248.p2.g83d4961.assembly.stream.el8, ose-crio-credential-provider-4.22.0-202608271248.p2.g83d4961.assembly.stream.el9
  • RHSA-2026:65153 Released 2026-09-08 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-4.el9_8.1, osbuild-composer-core-165.1-4.el9_8.1, osbuild-composer-worker-165.1-4.el9_8.1
  • RHSA-2026:65117 Released 2026-09-08 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.152.1-2.el9_8
  • RHSA-2026:65116 Released 2026-09-08 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.152.1-2.el10_2
  • RHSA-2026:63119 Released 2026-09-03 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-8.el10_2.1
  • RHSA-2026:63124 Released 2026-09-03 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-18.el8_10
  • RHSA-2026:63141 Released 2026-09-03 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.20.7 security update
    • Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/dex-rhel9
  • RHSA-2026:63139 Released 2026-09-03 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.7 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/dex-rhel8
  • RHSA-2026:60018 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 packages and security update
    • Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el8, cri-o-1.30.14-11.rhaos4.17.git1e2a16d.el9, cri-tools-1.30.0-9.el8 +25
  • RHSA-2026:60023 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9 +20
  • RHSA-2026:60025 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.57 security and extras update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ansible-rhel9-operator, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9 +1
  • RHSA-2026:63022 Released 2026-09-03 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-28.el10_2.5, grafana-selinux-10.2.6-28.el10_2.5
  • RHSA-2026:62631 Released 2026-09-02 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2.3
  • RHSA-2026:62577 Released 2026-09-02 · Red Hat rating Important
    go-fdo-client security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2.7
  • RHSA-2026:62406 Released 2026-09-02 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-23.el9_8.3, grafana-selinux-10.2.6-23.el9_8.3
  • RHSA-2026:62407 Released 2026-09-02 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-33.el8_10, grafana-selinux-9.2.10-33.el8_10
  • RHSA-2026:61882 Released 2026-09-01 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.7-1.el10_0, golang-1.26.7-1.el10_0, golang-bin-1.26.7-1.el10_0 +5
  • RHSA-2026:61253 Released 2026-08-31 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.5-1.el9_2, golang-1.26.5-1.el9_2, golang-bin-1.26.5-1.el9_2 +5
  • RHSA-2026:57482 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 packages and security update
    • Red Hat OpenShift Container Platform 4.18 butane-0.23.0-5.rhaos4.18.el8, butane-redistributable-0.23.0-5.rhaos4.18.el8, cri-o-1.31.13-11.rhaos4.18.git817a650.el9 +27
  • RHSA-2026:57487 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9, registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator +2
  • RHSA-2026:57488 Released 2026-08-26 · Red Hat rating Important
    OpenShift Container Platform 4.18.54 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ansible-rhel9-operator
  • RHSA-2026:57456 Released 2026-08-25 · Red Hat rating Important
    OpenShift Container Platform 4.21.30 packages and security update
    • Red Hat OpenShift Container Platform 4.21 openshift-4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10, openshift-4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el8, openshift-4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 +11
  • RHSA-2026:57361 Released 2026-08-25 · Red Hat rating Important
    OpenShift Container Platform 4.22.11 packages and security update
    • Red Hat OpenShift Container Platform 4.22 cri-o-1.35.6-5.rhaos4.22.git41f610b.el9, cri-tools-1.35.0-3.el9, openshift-4.22.0-202608190726.p2.g05744ab.assembly.stream.el8 +17
  • RHSA-2026:59203 Released 2026-08-24 · Red Hat rating Important
    RHACS 4.10.7 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2026:59202 Released 2026-08-24 · Red Hat rating Important
    RHACS 4.9.11 security and bug fix update
    • Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2026:57649 Released 2026-08-20 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.5-1.el9_4, golang-1.26.5-1.el9_4, golang-bin-1.26.5-1.el9_4 +5
  • RHSA-2026:57194 Released 2026-08-19 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.5 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +11
  • RHSA-2026:57191 Released 2026-08-19 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +15
  • RHSA-2026:56340 Released 2026-08-18 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.2
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:56223 Released 2026-08-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-15.el9_6
  • RHSA-2026:56143 Released 2026-08-18 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.3.0-1.el10_0
  • RHSA-2026:54531 Released 2026-08-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.1
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:54500 Released 2026-08-13 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle
  • RHSA-2026:54435 Released 2026-08-12 · Red Hat rating Important
    Streams for Apache Kafka 3.2.1 release and security update
    • Streams for Apache Kafka 3.2.1
  • RHSA-2026:53520 Released 2026-08-11 · Red Hat rating Important
    Red Hat Quay 3.10.25
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:52968 Released 2026-08-10 · Red Hat rating Important
    Red Hat Quay 3.12.21
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:51057 Released 2026-08-06 · Red Hat rating Important
    OpenShift Source To Image 1.6.3
    • OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2026:50931 Released 2026-08-05 · Red Hat rating Important
    Red Hat Quay 3.9.25
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:50843 Released 2026-08-05 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.16
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:50336 Released 2026-08-04 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.7-1.el10ap, receptorctl-1.6.7-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.15-2.el9ap, automation-controller-cli-4.7.15-2.el9ap, automation-controller-server-4.7.15-2.el9ap +15
  • RHSA-2026:50319 Released 2026-08-04 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.31-1.el8ap, automation-eda-controller-1.1.21-1.el8ap, automation-eda-controller-base-1.1.21-1.el8ap +11
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.31-1.el9ap, automation-eda-controller-1.1.21-1.el9ap, automation-eda-controller-base-1.1.21-1.el9ap +11
  • RHSA-2026:50300 Released 2026-08-04 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.1 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-ui-rhel9
  • RHSA-2026:50205 Released 2026-08-04 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.10.1 release
    • Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator
  • RHSA-2026:49712 Released 2026-08-03 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.5-1.el9_6, golang-1.26.5-1.el9_6, golang-bin-1.26.5-1.el9_6 +5
  • RHSA-2026:49642 Released 2026-08-03 · Red Hat rating Important
    Red Hat Developer Hub 1.10.3 release.
    • Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:48891 Released 2026-07-30 · Red Hat rating Important
    RHACS 4.11.2 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes 4.11 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9
  • RHSA-2026:48151 Released 2026-07-29 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-reports-rhel9 +4
  • RHSA-2026:47952 Released 2026-07-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.12
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:43038 Released 2026-07-21 · Red Hat rating Critical
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-solution-server-rhel9
  • RHSA-2026:42946 Released 2026-07-21 · Red Hat rating Important
    rhc-worker-playbook security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.10-1.el10_2
  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:42051 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.0 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42050 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.0 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42049 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.1 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:42048 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.16.1 release.
    • Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42047 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.12.1 release.
    • Red Hat Web Terminal 1.12 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:42043 Released 2026-07-20 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.1 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:41929 Released 2026-07-20 · Red Hat rating Important
    Red Hat Developer Hub 1.9.7 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:41066 Released 2026-07-16 · Red Hat rating Important
    Red Hat Quay 3.16.5
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:38995 Released 2026-07-13 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8 +22
  • RHSA-2026:29981 Released 2026-06-25 · Red Hat rating Moderate
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.4-1.el9_8, golang-1.26.4-1.el9_8, golang-bin-1.26.4-1.el9_8 +5
  • RHSA-2026:29980 Released 2026-06-25 · Red Hat rating Moderate
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.4-1.el10_2, golang-1.26.4-1.el10_2, golang-bin-1.26.4-1.el10_2 +5
  • RHSA-2026:23264 Released 2026-06-04 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.4-2.hum1@aarch64, golang1.26-1.26.4-2.hum1@src, golang1.26-1.26.4-2.hum1@x86_64 +10
  • RHSA-2026:23262 Released 2026-06-04 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.11-2.hum1@aarch64, golang1.25-1.25.11-2.hum1@src, golang1.25-1.25.11-2.hum1@x86_64 +10

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Builds for Red Hat OpenShiftAffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Deployment Validation OperatorAffectedNo fix yet
External Secrets Operator for Red Hat OpenShiftAffectedNo fix planned: Will not fix
File Integrity OperatorAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Logical Volume Manager StorageAffectedNo fix yet
Multiarch Tuning OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Multicluster Global HubAffectedNo fix yet
Network Observability OperatorAffectedNo fix yet
OpenShift API for Data ProtectionAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 2AffectedNo fix planned: Will not fix
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Edge Manager 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Service Interconnect 2AffectedNo fix planned: Will not fix
Red Hat Trusted Artifact SignerAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:90332
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cert Manager support for Red Hat OpenShift release 1.19Fixed RHSA-2026:54531
Cluster Observability Operator 1.5Fixed RHSA-2026:74609, RHSA-2026:95081, RHSA-2026:95591
Cryostat 4 on RHEL 9Fixed RHSA-2026:48151
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:50843
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:47952
Logging Subsystem for Red Hat OpenShift 6.5Fixed RHSA-2026:56340
Logical Volume Manager Storage 4.12Fixed RHSA-2026:88199
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
OpenShift API for Data Protection 1.6Fixed RHSA-2026:91613
OpenShift Compliance Operator 1Fixed RHSA-2026:54500, RHSA-2026:95612
OpenShift Developer Tools and Services 1.6.4Fixed RHSA-2026:51057
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2026:72882
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:72885
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:57191
Red Hat Advanced Cluster Security 4.9Fixed RHSA-2026:59202
Red Hat Advanced Cluster Security for Kubernetes 4.11Fixed RHSA-2026:48891
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Fixed RHSA-2026:59203
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:50319, RHSA-2026:71114
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:50319, RHSA-2026:71114
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:71179
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:50336
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:50336, RHSA-2026:71113
Red Hat Ansible Automation Platform 2.7Fixed RHSA-2026:67279
Red Hat Developer Hub 1.10Fixed RHSA-2026:49642
Red Hat Developer Hub 1.9Fixed RHSA-2026:41929
Red Hat Edge Manager 1.1Fixed RHSA-2026:68044
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:29980, RHSA-2026:42946, RHSA-2026:62577, RHSA-2026:62631, RHSA-2026:63022, RHSA-2026:63119, RHSA-2026:65116, RHSA-2026:65534, RHSA-2026:65895, RHSA-2026:69308
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:38995, RHSA-2026:62407, RHSA-2026:63124, RHSA-2026:67148
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:29981, RHSA-2026:62406, RHSA-2026:65117, RHSA-2026:65153, RHSA-2026:65886
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:61253, RHSA-2026:67160, RHSA-2026:76809, RHSA-2026:92372
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:57649, RHSA-2026:67159, RHSA-2026:68527, RHSA-2026:72276, RHSA-2026:76795, RHSA-2026:91958
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:56143, RHSA-2026:61882, RHSA-2026:66327, RHSA-2026:67517, RHSA-2026:67974
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:49712, RHSA-2026:56223, RHSA-2026:67518, RHSA-2026:67975, RHSA-2026:91587
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:69308
Red Hat Hardened ImagesFixed RHSA-2026:23262, RHSA-2026:23264
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:73538
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:68681
Red Hat Migration Toolkit for Applications 8.1Fixed RHSA-2026:50300
Red Hat Migration Toolkit for Applications 8.2Fixed RHSA-2026:43038
Red Hat OpenShift AI 2.25Fixed RHSA-2026:42644
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91248
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91249
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:70645
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:77319
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:82810
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:67934, RHSA-2026:67936, RHSA-2026:83631
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:60018, RHSA-2026:60023, RHSA-2026:60025, RHSA-2026:70587
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:57482, RHSA-2026:57487, RHSA-2026:57488, RHSA-2026:70614, RHSA-2026:80167
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:68534, RHSA-2026:91191
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:66375, RHSA-2026:71450, RHSA-2026:74797
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:57456, RHSA-2026:66350, RHSA-2026:66352, RHSA-2026:71443, RHSA-2026:71453, RHSA-2026:74796
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:57361, RHSA-2026:63091, RHSA-2026:68552
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:63139
Red Hat OpenShift GitOps 1.20Fixed RHSA-2026:63141
Red Hat OpenShift distributed tracing 3.10.1Fixed RHSA-2026:50205
Red Hat OpenStack 1.5Fixed RHSA-2026:77532
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:95206
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:80684
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:90332, RHSA-2026:95576
Red Hat Quay 3.10Fixed RHSA-2026:53520
Red Hat Quay 3.12Fixed RHSA-2026:52968
Red Hat Quay 3.14Fixed RHSA-2026:70267
Red Hat Quay 3.16Fixed RHSA-2026:41066
Red Hat Quay 3.17Fixed RHSA-2026:74511
Red Hat Quay 3.9Fixed RHSA-2026:50931
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:74506
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:74506
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:74505
Red Hat Satellite 6.18Fixed RHSA-2026:74632
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:74504
Red Hat Satellite 6.19Fixed RHSA-2026:68780
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:74503
Red Hat Web Terminal 1.11Fixed RHSA-2026:42043
Red Hat Web Terminal 1.12Fixed RHSA-2026:42047
Red Hat Web Terminal 1.13Fixed RHSA-2026:42050
Red Hat Web Terminal 1.14Fixed RHSA-2026:42051
Red Hat Web Terminal 1.15Fixed RHSA-2026:42049
Red Hat Web Terminal 1.16Fixed RHSA-2026:42048
Streams for Apache Kafka 3.2.1Fixed RHSA-2026:54435
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:57194
Not affected: 92 products
  • Cert Manager support for Red Hat OpenShift release 1.19
  • Cluster Observability Operator 1.5
  • Cryostat 4 on RHEL 9
  • ExternalDNS Operator
  • File Integrity Operator
  • Gatekeeper 3
  • Ironic content for Red Hat OpenShift Container Platform 4.13
  • Ironic content for Red Hat OpenShift Container Platform 4.22
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.5
  • Logical Volume Manager Storage
  • Logical Volume Manager Storage 4.12
  • Multicluster Engine for Kubernetes
  • OpenShift API for Data Protection
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift API for Data Protection 1.6
  • OpenShift Compliance Operator 1
  • OpenShift Security Profiles Operator 1
  • OpenShift Service Mesh 3
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Security 4.9
  • Red Hat Advanced Cluster Security for Kubernetes 4.11
  • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Ansible Automation Platform 2.7
  • Red Hat Developer Hub 1.10
  • Red Hat Developer Hub 1.9
  • Red Hat Edge Manager 1.1
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat Migration Toolkit for Applications 8.1
  • Red Hat Migration Toolkit for Applications 8.2
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift GitOps 1.20
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.10.1
  • Red Hat OpenStack 1.5
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Openshift Data Foundation 4
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.14
  • Red Hat Quay 3.16
  • Red Hat Quay 3.17
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.12
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Red Hat Web Terminal 1.16
  • multicluster engine for Kubernetes 2.11

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42504
  2. 2026-10-03 Alias added: GHSA-h524-452v-82p9
  3. 2026-10-07 Fix available: RHSA-2026:74796 · Red Hat
  4. 2026-10-07 Fix available: RHSA-2026:76795 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:76809 · Red Hat
  6. 2026-10-07 Affected versions changed · Red Hat
  7. 2026-10-07 Fix available: RHSA-2026:77532 · Red Hat
  8. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  9. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1, Red Hat OpenStack 1.5 · Red Hat
  10. 2026-10-09 Fix available: RHSA-2026:74797 · Red Hat
  11. 2026-10-09 Affected versions changed · Red Hat
  12. 2026-10-10 Fix available: RHSA-2026:56143 · Red Hat
  13. 2026-10-10 Fix available: RHSA-2026:56223 · Red Hat
  14. 2026-10-10 Fix available: RHSA-2026:67517 · Red Hat
  15. 2026-10-10 Fix available: RHSA-2026:67518 · Red Hat
  16. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  17. 2026-10-13 Fix available: RHSA-2026:80684 · Red Hat
  18. 2026-10-13 Fix available: Red Hat OpenStack Platform 17.1 · Red Hat
  19. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  20. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  21. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  22. 2026-10-16 Fix available: RHSA-2026:77319 · Red Hat
  23. 2026-10-16 Fix available: RHSA-2026:80167 · Red Hat
  24. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0, Red Hat OpenShift Container Platform 4.13 · Red Hat
  25. 2026-10-20 Fix available: RHSA-2026:83631 · Red Hat
  26. 2026-10-20 Affected versions changed · Red Hat
  27. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  28. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  29. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  30. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  31. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  32. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  33. 2026-10-23 Fix available: RHSA-2026:88199 · Red Hat
  34. 2026-10-23 Fix available: RHSA-2026:82810 · Red Hat
  35. 2026-10-23 Fix available: Logical Volume Manager Storage 4.12, Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4.11, Red Hat OpenShift Container Platform 4.15 · Red Hat
  36. 2026-10-26 Fix available: RHSA-2026:90332 · Red Hat
  37. 2026-10-26 Fix available: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0 · Red Hat
  38. 2026-10-27 Affected versions changed · Red Hat
  39. 2026-10-27 Affected versions changed · Red Hat
  40. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  41. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  42. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  43. 2026-10-29 Fix available: RHSA-2026:91191 · Red Hat
  44. 2026-10-29 Fix available: RHSA-2026:42946 · Red Hat
  45. 2026-10-29 Fix available: RHSA-2026:92372 · Red Hat
  46. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  47. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  48. 2026-10-30 Fix available: RHSA-2026:91587 · Red Hat
  49. 2026-10-30 Fix available: RHSA-2026:91958 · Red Hat
  50. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  51. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  52. 2026-10-30 Fix available: RHSA-2026:91613 · Red Hat
  53. 2026-10-30 Fix available: OpenShift API for Data Protection 1.6, Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
  54. 2026-10-31 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11, Red Hat OpenShift distributed tracing 3.10.1 · Red Hat
  55. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  56. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4 · Red Hat
  57. 2026-11-04 Fix available: RHSA-2026:95081 · Red Hat
  58. 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
  59. 2026-11-04 Fix available: Cluster Observability Operator 1.5, Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10, Red Hat OpenStack Platform 16.2 · Red Hat
  60. 2026-11-05 Affected versions changed · Red Hat
  61. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat
  62. 2026-11-06 Fix available: RHSA-2026:95591 · Red Hat
  63. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  64. 2026-11-06 Fix available: RHSA-2026:95576 · Red Hat
  65. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  66. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat

References

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences