Read the docs
TI-2026-40992 Aliases CVE-2026-56852GHSA-jpjm-c3r5-q96r

Infinite loop on invalid input in golang.org/x/text

Priority LOW 39CWE-835Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 75 fixed, 53 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-835.

Summary

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00475 41st percentileScored 2026-11-07
Fix Partial golang.org/x/text/unicode/norm (golang.org/x/text): 0.39.0Red Hat: 125 advisoriesRed Hat: 75 fixed, 53 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
golang.org/x/textgolang.org/x/text/unicode/normbefore 0.39.00.39.0Patch availableCNA
  • golang.org/x/text/unicode/norm Vendorgolang.org/x/text Affected before 0.39.0 Fixed in 0.39.0 Patch available CNA

Remediation

  • Fix · CNA golang.org/x/text/unicode/norm (golang.org/x/text) Fixed in 0.39.0

Red Hat 125 advisories

  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:94094 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.3 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:94074 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.2 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
Show 122 more Red Hat advisories
  • RHSA-2026:94073 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.17.2 release.
    • Red Hat Web Terminal 1.17 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:94072 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.3 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:94071 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.16.3 release.
    • Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:94070 Released 2026-11-02 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.2 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
  • RHSA-2026:92859 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.17 security update
    • Red Hat Satellite 6.17 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92858 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.16 EUS security update
    • Red Hat Satellite 6.16 for RHEL 8 openvox-agent-8.31.1-1.el8sat, openvox-server-8.17.0-1.el8sat, yggdrasil-worker-forwarder-0.1.1-1.el8sat
    • Red Hat Satellite 6.16 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92860 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.18 security update
    • Red Hat Satellite 6.18 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:90330 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-libpod-stats-1.0.4-6.2.el8ost, collectd-sensubility-0.2.1-1.3.el8ost, etcd-3.3.23-25.el8ost
  • RHSA-2026:90321 Released 2026-10-26 · Red Hat rating Critical
    Red Hat OpenShift Dev Spaces 3.31.0 Release.
    • Red Hat OpenShift Dev Spaces 3.31 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/jetbrains-ide-rhel9 +8
  • RHSA-2026:85247 Released 2026-10-19 · Red Hat rating Important
    DevWorkspace Operator 1.0.0 release.
    • DevWorkspace Operator 1.0 registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:83663 Released 2026-10-15 · Red Hat rating Important
    MTV RHEL9 Images
    • Migration Toolkit for Virtualization 2.10 registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9
  • RHSA-2026:83662 Released 2026-10-15 · Red Hat rating Important
    MTV RHEL9 Images
    • Migration Toolkit for Virtualization 2.11 registry.redhat.io/migration-toolkit-virtualization/mtv-api-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-console-plugin-rhel9, registry.redhat.io/migration-toolkit-virtualization/mtv-validation-rhel9 +1
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:82315 Released 2026-10-13 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-hub-rhel9
  • RHSA-2026:77273 Released 2026-10-07 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.20.8 security update
    • Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9
  • RHSA-2026:77269 Released 2026-10-07 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.21.5 security update
    • Red Hat OpenShift GitOps 1.21 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9, registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator
  • RHSA-2026:74511 Released 2026-10-01 · Red Hat rating Important
    Red Hat Quay 3.17.5
    • Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:70587 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:73419 Released 2026-09-29 · Red Hat rating Important
    Multicluster Global Hub 1.6.6 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:73038 Released 2026-09-29 · Red Hat rating Important
    Multicluster Global Hub 1.8.2 security update
    • Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:72892 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +10
  • RHSA-2026:72885 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +2
  • RHSA-2026:72884 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.8 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +17
  • RHSA-2026:72882 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/thanos-rhel9
  • RHSA-2026:72881 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +3
  • RHSA-2026:72879 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.3 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +7
  • RHSA-2026:72854 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.11 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +8
  • RHSA-2026:72853 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.7 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +7
  • RHSA-2026:72850 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.6.15 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +7
  • RHSA-2026:72849 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.17.3 security update
    • multicluster engine for Kubernetes 2.17 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cloudevents-conductor-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:71597 Released 2026-09-24 · Red Hat rating Important
    Multicluster Global Hub 1.5.8 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:67936 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:70593 Released 2026-09-23 · Red Hat rating Important
    Network Observability 1.12.3 for OpenShift
    • Network Observability (NETOBSERV) 1.12.3 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9
  • RHSA-2026:70267 Released 2026-09-22 · Red Hat rating Important
    Red Hat Quay 3.14.9
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:70201 Released 2026-09-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-9.el10_2, podman-docker-7:5.8.2-9.el10_2, podman-remote-7:5.8.2-9.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-9.el10_2
  • RHSA-2026:69945 Released 2026-09-22 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.2
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:69928 Released 2026-09-22 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.2
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:69258 Released 2026-09-21 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-11.el8_10
  • RHSA-2026:69255 Released 2026-09-21 · Red Hat rating Important
    Red Hat Quay 3.16.6
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:68780 Released 2026-09-17 · Red Hat rating Critical
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:68764 Released 2026-09-17 · Red Hat rating Critical
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:68681 Released 2026-09-17 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.17 update
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-registry-rhel8, registry.redhat.io/rhmtc/openshift-migration-ui-rhel8
  • RHSA-2026:65852 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.18.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel9 +19
  • RHSA-2026:68515 Released 2026-09-17 · Red Hat rating Important
    Multicluster Global Hub 1.8.2 security update
    • Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:68335 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • RHEM 1.2 for RHEL 10 flightctl-1.2.1-1.el10, flightctl-agent-1.2.1-1.el10, flightctl-cli-1.2.1-1.el10
    • RHEM 1.2 for RHEL 9 flightctl-1.2.1-1.el9, flightctl-agent-1.2.1-1.el9, flightctl-cli-1.2.1-1.el9
  • RHSA-2026:68349 Released 2026-09-16 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.13
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:67842 Released 2026-09-16 · Red Hat rating Important
    Multicluster Global Hub 1.7.3 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:66371 Released 2026-09-16 · Red Hat rating Important
    OpenShift Container Platform 4.19.47 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel9, registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9 +8
  • RHSA-2026:67543 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.2 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +3
  • RHSA-2026:67542 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +5
  • RHSA-2026:67541 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.7 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +9
  • RHSA-2026:67540 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.12 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +5
  • RHSA-2026:67539 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.5 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +7
  • RHSA-2026:67538 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.12 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +8
  • RHSA-2026:66358 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:66377 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.20.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:66352 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:67516 Released 2026-09-15 · Red Hat rating Important
    Multicluster Global Hub 1.4.9 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:66523 Released 2026-09-10 · Red Hat rating Important
    Red Hat Quay 3.12.22
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66521 Released 2026-09-10 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.1
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9 +1
  • RHSA-2026:66363 Released 2026-09-10 · Red Hat rating Important
    external secrets operator for Red Hat OpenShift 1.2.1
    • external secrets operator for Red Hat OpenShift 1.2 registry.redhat.io/external-secrets-operator/external-secrets-rhel9
  • RHSA-2026:66084 Released 2026-09-09 · Red Hat rating Important
    Red Hat Quay 3.10.26
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:65514 Released 2026-09-08 · Red Hat rating Important
    Red Hat Quay 3.9.26
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:65343 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:65130 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.22.3 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.22 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +25
  • RHSA-2026:63307 Released 2026-09-03 · Red Hat rating Important
    Red Hat Quay 3.15.8
    • Red Hat Quay 3.15 registry.redhat.io/quay/quay-builder-rhel8, registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:63138 Released 2026-09-03 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.2
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:63135 Released 2026-09-03 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.2
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:62866 Released 2026-09-02 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-3 This version is a rebuild of 2.19.0 using a newer base image, Go modules and Go compiler, and two bug fixes. See the release notes for more information.
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-interceptor-rhel9 +5
  • RHSA-2026:61314 Released 2026-08-31 · Red Hat rating Important
    Cluster Observability Operator 1.5.2
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator +10
  • RHSA-2026:60391 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +19
  • RHSA-2026:60390 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.11 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +23
  • RHSA-2026:60388 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +26
  • RHSA-2026:60389 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.6 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9 +19
  • RHSA-2026:60387 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +24
  • RHSA-2026:60386 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +31
  • RHSA-2026:56340 Released 2026-08-18 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.2
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:54773 Released 2026-08-13 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.10.2 release
    • Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator
  • RHSA-2026:54549 Released 2026-08-13 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images hugo-0.165.0-0.1.hum1@aarch64, hugo-0.165.0-0.1.hum1@src, hugo-0.165.0-0.1.hum1@x86_64
  • RHSA-2026:54525 Released 2026-08-13 · Red Hat rating Important
    external secrets operator for Red Hat OpenShift 1.1.1
    • external secrets operator for Red Hat OpenShift 1.1 registry.redhat.io/external-secrets-operator/external-secrets-rhel9
  • RHSA-2026:54364 Released 2026-08-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images cosign-3.1.2-0.3.hum1@aarch64, cosign-3.1.2-0.3.hum1@src, cosign-3.1.2-0.3.hum1@x86_64
  • RHSA-2026:52912 Released 2026-08-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images skopeo-1:1.24.0-2.hum1@aarch64, skopeo-1:1.24.0-2.hum1@src, skopeo-1:1.24.0-2.hum1@x86_64 +2
  • RHSA-2026:51065 Released 2026-08-06 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images buildah-2:1.45.0-2.hum1@aarch64, buildah-2:1.45.0-2.hum1@src, buildah-2:1.45.0-2.hum1@x86_64
  • RHSA-2026:49360 Released 2026-08-01 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images buildah-2:1.44.0-3.3.hum1@aarch64, buildah-2:1.44.0-3.3.hum1@src, buildah-2:1.44.0-3.3.hum1@x86_64
  • RHSA-2026:49317 Released 2026-07-31 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images prometheus3.13-3.13.2-0.1.hum1@aarch64, prometheus3.13-3.13.2-0.1.hum1@src, prometheus3.13-3.13.2-0.1.hum1@x86_64
  • RHSA-2026:48306 Released 2026-07-29 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images go-fdo-server-1.0.1-0.5.hum1@aarch64, go-fdo-server-1.0.1-0.5.hum1@src, go-fdo-server-1.0.1-0.5.hum1@x86_64 +6
  • RHSA-2026:46988 Released 2026-07-27 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images trivy-0.72.0-0.1.2.hum1@aarch64, trivy-0.72.0-0.1.2.hum1@src, trivy-0.72.0-0.1.2.hum1@x86_64
  • RHSA-2026:46960 Released 2026-07-27 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentofu1.12-1.12.5-0.2.hum1@aarch64, opentofu1.12-1.12.5-0.2.hum1@src, opentofu1.12-1.12.5-0.2.hum1@x86_64
  • RHSA-2026:46953 Released 2026-07-27 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images go-fdo-client-1.0.0-2.1.hum1@aarch64, go-fdo-client-1.0.0-2.1.hum1@src, go-fdo-client-1.0.0-2.1.hum1@x86_64
  • RHSA-2026:44479 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images prometheus3.5-3.5.5-0.3.hum1@aarch64, prometheus3.5-3.5.5-0.3.hum1@src, prometheus3.5-3.5.5-0.3.hum1@x86_64
  • RHSA-2026:44451 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images cosign-3.1.2-0.2.hum1@aarch64, cosign-3.1.2-0.2.hum1@src, cosign-3.1.2-0.2.hum1@x86_64
  • RHSA-2026:44430 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images etcd-3.7.0-0.3.hum1@aarch64, etcd-3.7.0-0.3.hum1@src, etcd-3.7.0-0.3.hum1@x86_64
  • RHSA-2026:44162 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.15-1.15.2-0.3.hum1@aarch64, spire1.15-1.15.2-0.3.hum1@src, spire1.15-1.15.2-0.3.hum1@x86_64 +6
  • RHSA-2026:44152 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images podman-5:6.0.2-2.1.hum1@aarch64, podman-5:6.0.2-2.1.hum1@src, podman-5:6.0.2-2.1.hum1@x86_64 +10
  • RHSA-2026:44151 Released 2026-07-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images caddy-2.11.4-0.3.hum1@aarch64, caddy-2.11.4-0.3.hum1@src, caddy-2.11.4-0.3.hum1@x86_64
  • RHSA-2026:43906 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images kubernetes1.36-1.36.2-6.1.hum1@aarch64, kubernetes1.36-1.36.2-6.1.hum1@src, kubernetes1.36-1.36.2-6.1.hum1@x86_64 +6
  • RHSA-2026:43873 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images hugo-0.164.0-0.1.2.hum1@aarch64, hugo-0.164.0-0.1.2.hum1@src, hugo-0.164.0-0.1.2.hum1@x86_64
  • RHSA-2026:43866 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images prometheus3.13-3.13.1-0.3.hum1@aarch64, prometheus3.13-3.13.1-0.3.hum1@src, prometheus3.13-3.13.1-0.3.hum1@x86_64
  • RHSA-2026:43852 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images kubernetes1.35-1.35.6-2.1.hum1@aarch64, kubernetes1.35-1.35.6-2.1.hum1@src, kubernetes1.35-1.35.6-2.1.hum1@x86_64 +6
  • RHSA-2026:43803 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentofu1.10-1.10.10-0.3.hum1@aarch64, opentofu1.10-1.10.10-0.3.hum1@src, opentofu1.10-1.10.10-0.3.hum1@x86_64
  • RHSA-2026:43801 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images jaeger-2.20.0-0.2.hum1@aarch64, jaeger-2.20.0-0.2.hum1@src, jaeger-2.20.0-0.2.hum1@x86_64
  • RHSA-2026:43799 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentelemetry-collector-0.157.0-0.1.hum1@aarch64, opentelemetry-collector-0.157.0-0.1.hum1@src, opentelemetry-collector-0.157.0-0.1.hum1@x86_64
  • RHSA-2026:43797 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images oauth2-proxy-7.15.3-0.3.hum1@aarch64, oauth2-proxy-7.15.3-0.3.hum1@src, oauth2-proxy-7.15.3-0.3.hum1@x86_64
  • RHSA-2026:43716 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images yq-4.53.3-2.1.hum1@aarch64, yq-4.53.3-2.1.hum1@src, yq-4.53.3-2.1.hum1@x86_64
  • RHSA-2026:43581 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-contrib-0.157.0-0.1.hum1@aarch64, opentelemetry-collector-contrib-0.157.0-0.1.hum1@src, opentelemetry-collector-contrib-0.157.0-0.1.hum1@x86_64
  • RHSA-2026:43554 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentofu1.11-1.11.13-0.2.hum1@aarch64, opentofu1.11-1.11.13-0.2.hum1@src, opentofu1.11-1.11.13-0.2.hum1@x86_64
  • RHSA-2026:43311 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images spire1.14-1.14.7-0.2.hum1@aarch64, spire1.14-1.14.7-0.2.hum1@src, spire1.14-1.14.7-0.2.hum1@x86_64 +6
  • RHSA-2026:43119 Released 2026-07-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images skopeo-1:1.23.0-3.1.hum1@aarch64, skopeo-1:1.23.0-3.1.hum1@src, skopeo-1:1.23.0-3.1.hum1@x86_64 +2
  • RHSA-2026:43015 Released 2026-07-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images syft-1.49.0-0.1.hum1@aarch64, syft-1.49.0-0.1.hum1@src, syft-1.49.0-0.1.hum1@x86_64
  • RHSA-2026:42241 Released 2026-07-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images helm3-3.21.3-0.1.2.hum1@aarch64, helm3-3.21.3-0.1.2.hum1@src, helm3-3.21.3-0.1.2.hum1@x86_64
  • RHSA-2026:42230 Released 2026-07-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images helm4-4.2.3-0.1.2.hum1@aarch64, helm4-4.2.3-0.1.2.hum1@src, helm4-4.2.3-0.1.2.hum1@x86_64
  • RHSA-2026:42083 Released 2026-07-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grype-0.116.0-0.1.hum1@aarch64, grype-0.116.0-0.1.hum1@src, grype-0.116.0-0.1.hum1@x86_64
  • RHSA-2026:41020 Released 2026-07-16 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.5-0.1.1.hum1@aarch64, golang1.26-1.26.5-0.1.1.hum1@src, golang1.26-1.26.5-0.1.1.hum1@x86_64 +10
  • RHSA-2026:40964 Released 2026-07-16 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.12-1.1.hum1@aarch64, golang1.25-1.25.12-1.1.hum1@src, golang1.25-1.25.12-1.1.hum1@x86_64 +10

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
AWS Load Balancer OperatorAffectedNo fix yet
Ansible Automation Orchestrator 2026Affected—
Compliance OperatorAffectedNo fix yet
Confidential Cluster OperatorAffected—
Confidential Compute AttestationAffectedNo fix yet
Cost Management On PremiseAffected—
DPU kit for NVIDIAAffected—
Deployment Validation OperatorAffectedNo fix yet
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Job Set 1AffectedNo fix yet
Job Set Tech PreviewAffectedNo fix yet
Kernel Module Management Operator for Red Hat OpenshiftAffectedNo fix yet
Kube Descheduler OperatorAffectedNo fix yet
Leader Worker SetAffectedNo fix yet
Lightspeed CoreAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix yet
MCP Server for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Machine Deletion Remediation OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
Nvidia GPU Driver for RHEL on OpenshiftAffected—
OpenShift PipelinesAffectedNo fix yet
OpenShift Run Once Duration Override OperatorAffectedNo fix yet
OpenShift Secondary Scheduler OperatorAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
OpenShift Source-to-Image (S2I)Affected—
Pen Drive Powered by Red Hat LightspeedAffectedNo fix yet
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 4AffectedNo fix planned: Will not fix
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix yet
Red Hat Enterprise Linux 6Affected—
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift Update ServiceAffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Secrets Management Console for Red Hat OpenShiftAffectedNo fix yet
Security Profiles OperatorAffectedNo fix yet
Self Node Remediation OperatorAffectedNo fix yet
Storage-Based RemediationAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
Cert Manager support for Red Hat OpenShift release 1.19Fixed RHSA-2026:63135, RHSA-2026:63138
Cert Manager support for Red Hat OpenShift release 1.20Fixed RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476
Cluster Observability Operator 1.5Fixed RHSA-2026:61314
Custom Metric Autoscaler 2.19Fixed RHSA-2026:62866
DevWorkspace Operator 1.0Fixed RHSA-2026:85247
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:68349
Logging Subsystem for Red Hat OpenShift 6.5Fixed RHSA-2026:56340
Logging Subsystem for Red Hat OpenShift 6.6Fixed RHSA-2026:66521
Migration Toolkit for Virtualization 2.10Fixed RHSA-2026:83663
Migration Toolkit for Virtualization 2.11Fixed RHSA-2026:83662
Multicluster Global Hub 1.4.9Fixed RHSA-2026:67516
Multicluster Global Hub 1.5.8Fixed RHSA-2026:71597
Multicluster Global Hub 1.6.6Fixed RHSA-2026:73419
Multicluster Global Hub 1.7.4Fixed RHSA-2026:67842
Multicluster Global Hub 1.8.2Fixed RHSA-2026:68515, RHSA-2026:73038
Network Observability (NETOBSERV) 1.12.3Fixed RHSA-2026:70593
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
RHEM 1.2 for RHEL 10Fixed RHSA-2026:68335
RHEM 1.2 for RHEL 9Fixed RHSA-2026:68335
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2026:60387, RHSA-2026:67538, RHSA-2026:72882
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:60390, RHSA-2026:67540, RHSA-2026:72885
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:60388, RHSA-2026:67539, RHSA-2026:72881
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:60389, RHSA-2026:67541, RHSA-2026:72884
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:60391, RHSA-2026:67542, RHSA-2026:72892
Red Hat Advanced Cluster Management for Kubernetes 2.17Fixed RHSA-2026:60386, RHSA-2026:67543, RHSA-2026:72879
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:70201
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:69258
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:70201
Red Hat Hardened ImagesFixed RHSA-2026:40964, RHSA-2026:41020, RHSA-2026:42083, RHSA-2026:42230, RHSA-2026:42241, RHSA-2026:43015, RHSA-2026:43119, RHSA-2026:43311, RHSA-2026:43554, RHSA-2026:43581, RHSA-2026:43716, RHSA-2026:43797, RHSA-2026:43799, RHSA-2026:43801, RHSA-2026:43803, RHSA-2026:43852, RHSA-2026:43866, RHSA-2026:43873, RHSA-2026:43906, RHSA-2026:44151, RHSA-2026:44152, RHSA-2026:44162, RHSA-2026:44430, RHSA-2026:44451, RHSA-2026:44479, RHSA-2026:46953, RHSA-2026:46960, RHSA-2026:46988, RHSA-2026:48306, RHSA-2026:49317, RHSA-2026:49360, RHSA-2026:51065, RHSA-2026:52912, RHSA-2026:54364, RHSA-2026:54549
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:68681
Red Hat Migration Toolkit for Applications 8.2Fixed RHSA-2026:82315
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:69945
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:67936
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:70587
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:65852
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:66371
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:66377
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:66352
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:66358
Red Hat OpenShift Dev Spaces 3.31Fixed RHSA-2026:90321
Red Hat OpenShift GitOps 1.20Fixed RHSA-2026:77273
Red Hat OpenShift GitOps 1.21Fixed RHSA-2026:77269
Red Hat OpenShift distributed tracing 3.10.1Fixed RHSA-2026:54773
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:65343
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:90330
Red Hat Openshift Data Foundation 4.22Fixed RHSA-2026:65130
Red Hat Quay 3.10Fixed RHSA-2026:66084
Red Hat Quay 3.12Fixed RHSA-2026:66523
Red Hat Quay 3.14Fixed RHSA-2026:70267
Red Hat Quay 3.15Fixed RHSA-2026:63307
Red Hat Quay 3.16Fixed RHSA-2026:69255
Red Hat Quay 3.17Fixed RHSA-2026:74511
Red Hat Quay 3.9Fixed RHSA-2026:65514
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:92858
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:92858
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:92859
Red Hat Satellite 6.18Fixed RHSA-2026:68764
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:92860
Red Hat Satellite 6.19Fixed RHSA-2026:68780
Red Hat Web Terminal 1.11Fixed RHSA-2026:94072
Red Hat Web Terminal 1.13Fixed RHSA-2026:94070
Red Hat Web Terminal 1.14Fixed RHSA-2026:94074
Red Hat Web Terminal 1.15Fixed RHSA-2026:94094
Red Hat Web Terminal 1.16Fixed RHSA-2026:94071
Red Hat Web Terminal 1.17Fixed RHSA-2026:94073
external secrets operator for Red Hat OpenShift 1.1Fixed RHSA-2026:54525
external secrets operator for Red Hat OpenShift 1.2Fixed RHSA-2026:66363
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:72853
multicluster engine for Kubernetes 2.17Fixed RHSA-2026:72849
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:72850
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:72854
Not affected: 102 products
  • Assisted Installer for Red Hat OpenShift Container Platform 2
  • Cert Manager support for Red Hat OpenShift release 1.20
  • Cluster Observability Operator 1.5
  • Cost Management Metrics Operator
  • Cryostat 4
  • DevWorkspace Operator 1.0
  • Exploit Intelligence
  • ExternalDNS Operator
  • File Integrity Operator
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.5
  • Logging Subsystem for Red Hat OpenShift 6.6
  • Logical Volume Manager Storage
  • MCP Lifecycle Operator
  • Migration Toolkit for Virtualization 2.10
  • Migration Toolkit for Virtualization 2.11
  • Multiarch Tuning Operator
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Multicluster Global Hub 1.7.4
  • Multicluster Global Hub 1.8.2
  • Network Observability (NETOBSERV) 1.12.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Developer Tools and Services
  • OpenShift Lightspeed
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • RHEM 1.2 for RHEL 10
  • RHEM 1.2 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat AI Inference Server
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Management for Kubernetes 2.17
  • Red Hat Ansible Automation Platform 2
  • Red Hat Build of Kueue
  • Red Hat Ceph Storage 5
  • Red Hat Ceph Storage 6
  • Red Hat Ceph Storage 7
  • Red Hat Ceph Storage 8
  • Red Hat Ceph Storage 9
  • Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux 9
  • Red Hat Hardened Images
  • Red Hat Lightspeed for Runtimes Operator
  • Red Hat Migration Toolkit 1.8
  • Red Hat Migration Toolkit for Applications 8.2
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces 3.31
  • Red Hat OpenShift GitOps 1.20
  • Red Hat OpenShift GitOps 1.21
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3.10.1
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.22
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.14
  • Red Hat Quay 3.15
  • Red Hat Quay 3.16
  • Red Hat Quay 3.17
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Profile Analyzer
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Red Hat Web Terminal 1.16
  • Red Hat Web Terminal 1.17
  • Service Telemetry Framework 1.5
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.17
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • streams for Apache Kafka 2
  • streams for Apache Kafka 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56852
  2. 2026-10-03 Alias added: GHSA-jpjm-c3r5-q96r
  3. 2026-10-06 Affected versions changed · Red Hat
  4. 2026-10-07 Fix available: RHSA-2026:77269 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:77273 · Red Hat
  6. 2026-10-07 Fix available: Red Hat OpenShift GitOps 1.20, Red Hat OpenShift GitOps 1.21 · Red Hat
  7. 2026-10-09 Fix available: Red Hat OpenShift distributed tracing 3.11.2 · Red Hat
  8. 2026-10-10 Affected versions changed · Red Hat
  9. 2026-10-13 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  10. 2026-10-14 Fix available: RHSA-2026:82315 · Red Hat
  11. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  12. 2026-10-16 Fix available: RHSA-2026:83662 · Red Hat
  13. 2026-10-16 Fix available: RHSA-2026:83663 · Red Hat
  14. 2026-10-16 Fix available: Logging Subsystem for Red Hat OpenShift 6.0, Migration Toolkit for Virtualization 2.10, Migration Toolkit for Virtualization 2.11 +1 · Red Hat
  15. 2026-10-20 Fix available: RHSA-2026:85247 · Red Hat
  16. 2026-10-20 Fix available: DevWorkspace Operator 1.0 · Red Hat
  17. 2026-10-24 Fix available: Red Hat OpenShift distributed tracing 3.11.3 · Red Hat
  18. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3 · Red Hat
  19. 2026-10-26 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  20. 2026-10-27 Fix available: Red Hat OpenStack Platform 16.2 · Red Hat
  21. 2026-10-29 Fix available: RHSA-2026:90330 · Red Hat
  22. 2026-10-29 Fix available: Red Hat OpenShift Dev Spaces 3.31 · Red Hat
  23. 2026-10-30 Fix available: RHSA-2026:90321 · Red Hat
  24. 2026-10-30 Fix available: RHSA-2026:92858 · Red Hat
  25. 2026-10-30 Fix available: RHSA-2026:92859 · Red Hat
  26. 2026-10-30 Fix available: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9 +1 · Red Hat
  27. 2026-10-30 Fix available: RHSA-2026:92860 · Red Hat
  28. 2026-10-30 Affected versions changed · Red Hat
  29. 2026-10-31 Fix available: Red Hat OpenShift distributed tracing 3.10.1 · Red Hat
  30. 2026-11-03 Fix available: RHSA-2026:94094 · Red Hat
  31. 2026-11-03 Fix available: RHSA-2026:94074 · Red Hat
  32. 2026-11-03 Fix available: RHSA-2026:94072 · Red Hat
  33. 2026-11-03 Fix available: RHSA-2026:94071 · Red Hat
  34. 2026-11-03 Fix available: RHSA-2026:94070 · Red Hat
  35. 2026-11-03 Fix available: RHSA-2026:94073 · Red Hat
  36. 2026-11-03 Fix available: Red Hat Web Terminal 1.11, Red Hat Web Terminal 1.13, Red Hat Web Terminal 1.14 +3 · Red Hat
  37. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  38. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4 · Red Hat
  39. 2026-11-04 Fix available: Cluster Observability Operator 1.5 · Red Hat
  40. 2026-11-06 Fix available: Multicluster Global Hub 1.7.4 · Red Hat

References

Other 3

  • TI-2026-69257 Panic in golang.org/x/text Nickname profile parsing crafted input CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences