Read the docs
TI-2026-40998 Aliases CVE-2026-56860GHSA-25mv-j2qr-v5jq

Avoid quadratic complexity in resolvePath in net/url

Priority LOW 27CWE-407Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 132 fixed, 53 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-407.

Summary

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0055 46th percentileScored 2026-11-07
Fix Partial net/url (Go standard library): 1.25.13, 1.26.6, 1.27.0-rc.3Red Hat: 236 advisoriesRed Hat: 132 fixed, 53 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarynet/urlbefore 1.25.13; 1.26.0-0 to before 1.26.6; 1.27.0-0 to before 1.27.0-rc.31.25.13, 1.26.6, 1.27.0-rc.3Patch availableCNA
  • net/url VendorGo standard library Affected before 1.25.13; 1.26.0-0 to before 1.26.6; 1.27.0-0 to before 1.27.0-rc.3 Fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*——Go standard library

Remediation

  • Fix · CNA net/url (Go standard library) Fixed in 1.25.13, 1.26.6, 1.27.0-rc.3

Red Hat 236 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:95591 Released 2026-11-05 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95576 Released 2026-11-05 · Red Hat rating Important
    Release of containers for RHOSO 18.0.22
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +23
Show 233 more Red Hat advisories
  • RHSA-2026:95437 Released 2026-11-05 · Red Hat rating Important
    LVMS 4.20 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.20 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
  • RHSA-2026:95206 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:95081 Released 2026-11-04 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:94587 Released 2026-11-03 · Red Hat rating Important
    LVMS 4.19 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.19 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:94489 Released 2026-11-03 · Red Hat rating Important
    LVMS 4.18 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.18 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:94063 Released 2026-11-02 · Red Hat rating Important
    Satellite 6 Client Update
    • Satellite Client 6 for RHEL 10 foreman_ygg_worker-0.3.3-3.el10sat
    • Satellite Client 6 for RHEL 8 foreman_ygg_worker-0.3.3-3.el8sat, yggdrasil-0.2.3-5.el8sat
    • Satellite Client 6 for RHEL 9 foreman_ygg_worker-0.3.3-3.el9sat, yggdrasil-0.2.3-5.el9sat
  • RHSA-2026:93959 Released 2026-11-02 · Red Hat rating Important
    OpenShift Virtualization v4.17 Images
    • Red Hat Container Native Virtualization 4.17 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:93598 Released 2026-11-02 · Red Hat rating Important
    LVMS 4.17 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.17 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:91191 Released 2026-10-29 · Red Hat rating Important
    Red Hat build of MicroShift 4.19.53 security update
    • Red Hat OpenShift Container Platform 4.19 microshift-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-release-info-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9 +12
  • RHSA-2026:92307 Released 2026-10-29 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.14 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +16
  • RHSA-2026:92303 Released 2026-10-29 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.12 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9 +12
  • RHSA-2026:92291 Released 2026-10-29 · Red Hat rating Important
    LVMS 4.16 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.16 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
  • RHSA-2026:91216 Released 2026-10-27 · Red Hat rating Important
    Red Hat Cost Management On-Premise container image update
    • Red Hat Cost Management On-Premise 1 registry.redhat.io/costmanagement/costmanagement-ingress-rhel9
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90758 Released 2026-10-27 · Red Hat rating Important
    LVMS 4.14 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.14 registry.redhat.io/lvms4/lvms-rhel9-operator
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:90330 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-libpod-stats-1.0.4-6.2.el8ost, collectd-sensubility-0.2.1-1.3.el8ost, etcd-3.3.23-25.el8ost
  • RHSA-2026:90332 Released 2026-10-26 · Red Hat rating Important
    RHOSO 18.0 os-diff security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
  • RHSA-2026:90329 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security advisory
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
  • RHSA-2026:89131 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +6
  • RHSA-2026:89041 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +7
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:82810 Released 2026-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.15.70 packages and security update
    • Red Hat OpenShift Container Platform 4.15 openshift-4.15.0-202610071830.p2.g5cb2ef4.assembly.stream.el8, openshift-4.15.0-202610071830.p2.g5cb2ef4.assembly.stream.el9, openshift-clients-4.15.0-202610071830.p2.g8231637.assembly.stream.el8 +11
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:88199 Released 2026-10-22 · Red Hat rating Important
    LVMS 4.12 Bug Fix and Enhancement update
    • Logical Volume Manager Storage 4.12 registry.redhat.io/lvms4/lvms-rhel8-operator
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:83631 Released 2026-10-19 · Red Hat rating Important
    Red Hat build of MicroShift 4.16.73 security update
    • Red Hat OpenShift Container Platform 4.16 microshift-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9, microshift-greenboot-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9, microshift-multus-4.16.73-202610151747.p0.g44abd51.assembly.4.16.73.el9 +6
  • RHSA-2026:85247 Released 2026-10-19 · Red Hat rating Important
    DevWorkspace Operator 1.0.0 release.
    • DevWorkspace Operator 1.0 registry.redhat.io/devworkspace/devworkspace-rhel9-operator
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:80167 Released 2026-10-15 · Red Hat rating Important
    Red Hat build of MicroShift 4.18.57 security update
    • Red Hat OpenShift Container Platform 4.18 microshift-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9, microshift-gateway-api-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9, microshift-gateway-api-release-info-4.18.57-202610092321.p0.g94a47d0.assembly.4.18.57.el9 +9
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:82843 Released 2026-10-14 · Red Hat rating Important
    OpenShift Virtualization v4.22 Images
    • Red Hat Container Native Virtualization 4.22 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82315 Released 2026-10-13 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-hub-rhel9
  • RHSA-2026:80684 Released 2026-10-12 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:73864 Released 2026-10-08 · Red Hat rating Important
    OpenShift Container Platform 4.14.75 packages and security update
    • Red Hat OpenShift Container Platform 4.14 openshift-kuryr-4.14.0-202609251136.p2.g8926a29.assembly.stream.el8, openshift-kuryr-cni-4.14.0-202609251136.p2.g8926a29.assembly.stream.el8, openshift-kuryr-common-4.14.0-202609251136.p2.g8926a29.assembly.stream.el8 +2
  • RHSA-2026:74797 Released 2026-10-08 · Red Hat rating Important
    Red Hat build of MicroShift 4.20.41 security update
    • Red Hat OpenShift Container Platform 4.20 microshift-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9, microshift-ai-model-serving-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9, microshift-ai-model-serving-release-info-4.20.41-202610012357.p0.gdad0307.assembly.4.20.41.el9 +14
  • RHSA-2026:73869 Released 2026-10-08 · Red Hat rating Important
    OpenShift Container Platform 4.14.75 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:77899 Released 2026-10-07 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.11.2 release.
    • Red Hat Web Terminal 1.11 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:77532 Released 2026-10-07 · Red Hat rating Important
    Release of components for Service Telemetry Framework 1.5.7
    • Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/sg-core-rhel9
  • RHSA-2026:77273 Released 2026-10-07 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.20.8 security update
    • Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9
  • RHSA-2026:74796 Released 2026-10-06 · Red Hat rating Important
    Red Hat build of MicroShift 4.21.36 security update
    • Red Hat OpenShift Container Platform 4.21 microshift-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9, microshift-ai-model-serving-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9, microshift-ai-model-serving-release-info-4.21.36-202610012325.p0.g5f30446.assembly.4.21.36.el9 +16
  • RHSA-2026:76795 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-28.el9_4, grafana-selinux-9.2.10-28.el9_4
  • RHSA-2026:76809 Released 2026-10-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-13.el9_2
  • RHSA-2026:76752 Released 2026-10-06 · Red Hat rating Important
    OpenShift Security Profiles Operator bug fix and enhancement update
    • OpenShift Security Profiles Operator 1 registry.redhat.io/compliance/openshift-security-profiles-operator-bundle, registry.redhat.io/compliance/openshift-security-profiles-rhel8-operator, registry.redhat.io/compliance/openshift-selinuxd-rhel8
  • RHSA-2026:75863 Released 2026-10-05 · Red Hat rating Important
    OpenShift Virtualization v4.21 Images
    • Red Hat Container Native Virtualization 4.21 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:70614 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.18.56 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-o-1.31.13-16.rhaos4.18.gitfccfa27.el8, cri-o-1.31.13-16.rhaos4.18.gitfccfa27.el9, cri-tools-1.31.1-8.el8 +23
  • RHSA-2026:74506 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.16.14 Async Update
    • Red Hat Satellite 6.16 for RHEL 8 foreman-3.12.0.23-1.el8sat, foreman-cli-3.12.0.23-1.el8sat, foreman-debug-3.12.0.23-1.el8sat +32
    • Red Hat Satellite 6.16 for RHEL 9 foreman-3.12.0.23-1.el9sat, foreman-cli-3.12.0.23-1.el9sat, foreman-debug-3.12.0.23-1.el9sat +32
  • RHSA-2026:74505 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.17.12 Async Update
    • Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.22-1.el9sat, foreman-cli-3.14.0.22-1.el9sat, foreman-debug-3.14.0.22-1.el9sat +31
  • RHSA-2026:74504 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.18.10 Async Update
    • Red Hat Satellite 6.18 for RHEL 9 foreman-3.16.0.25-1.el9sat, foreman-cli-3.16.0.25-1.el9sat, foreman-debug-3.16.0.25-1.el9sat +26
  • RHSA-2026:74632 Released 2026-10-01 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:70645 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.99 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-37.rhaos4.12.git2e7f657.el8, cri-o-1.25.5-8.rhaos4.12.git6120b13.el9, cri-tools-1.25.0-7.el9 +9
  • RHSA-2026:74503 Released 2026-10-01 · Red Hat rating Critical
    Satellite 6.19.5 Async Update
    • Red Hat Satellite 6.19 for RHEL 9 foreman-3.18.0.14-1.el9sat, foreman-cli-3.18.0.14-1.el9sat, foreman-debug-3.18.0.14-1.el9sat +19
  • RHSA-2026:74511 Released 2026-10-01 · Red Hat rating Important
    Red Hat Quay 3.17.5
    • Red Hat Quay 3.17 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:70647 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.12.99 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:70585 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 packages and security update
    • Red Hat OpenShift Container Platform 4.17 cri-o-1.30.14-13.rhaos4.17.git3a25d98.el8, cri-o-1.30.14-13.rhaos4.17.git3a25d98.el9, cri-tools-1.30.0-10.el8 +23
  • RHSA-2026:70617 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.18.56 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:70587 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:74025 Released 2026-09-30 · Red Hat rating Important
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:73538 Released 2026-09-29 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:71445 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.22.16 packages and security update
    • Red Hat OpenShift Container Platform 4.22 cri-o-1.35.9-12.rhaos4.22.git4c168db.el9, openshift-4.22.0-202609220430.p2.g9858a61.assembly.stream.el8, openshift-4.22.0-202609220430.p2.g9858a61.assembly.stream.el9 +10
  • RHSA-2026:71672 Released 2026-09-29 · Red Hat rating Important
    Red Hat build of MicroShift 4.22.16 security update
    • Red Hat OpenShift Container Platform 4.22 microshift-4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9, microshift-ai-model-serving-4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9, microshift-ai-model-serving-release-info-4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9 +16
  • RHSA-2026:73419 Released 2026-09-29 · Red Hat rating Important
    Multicluster Global Hub 1.6.6 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:71443 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.21.35 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-o-1.34.14-7.rhaos4.21.gitdcc865d.el9, openshift-4.21.0-202609170630.p2.g601ff80.assembly.stream.el10, openshift-4.21.0-202609170630.p2.g601ff80.assembly.stream.el8 +15
  • RHSA-2026:73413 Released 2026-09-29 · Red Hat rating Important
    OpenShift Virtualization v4.18 Images
    • Red Hat Container Native Virtualization 4.18 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:73348 Released 2026-09-29 · Red Hat rating Important
    OpenShift Virtualization v4.16 Images
    • Red Hat Container Native Virtualization 4.16 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:73195 Released 2026-09-29 · Red Hat rating Important
    OpenShift Virtualization v4.19 Images
    • Red Hat Container Native Virtualization 4.19 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:73038 Released 2026-09-29 · Red Hat rating Important
    Multicluster Global Hub 1.8.2 security update
    • Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:72885 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +2
  • RHSA-2026:72882 Released 2026-09-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.13 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/thanos-rhel9
  • RHSA-2026:72854 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.11 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +8
  • RHSA-2026:72853 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.10.7 security update
    • multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/discovery-rhel9 +7
  • RHSA-2026:72851 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.8 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +7
  • RHSA-2026:72850 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.6.15 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +7
  • RHSA-2026:72848 Released 2026-09-28 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.7 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/azure-service-operator-rhel9, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +7
  • RHSA-2026:72805 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.8
  • RHSA-2026:72737 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.8
  • RHSA-2026:72276 Released 2026-09-28 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.6
  • RHSA-2026:71619 Released 2026-09-24 · Red Hat rating Important
    host-metering security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) host-metering-1.4.0-9.el7_9, host-metering-selinux-1.4.0-9.el7_9
  • RHSA-2026:71597 Released 2026-09-24 · Red Hat rating Important
    Multicluster Global Hub 1.5.8 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:67934 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 packages and security update
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.13-15.rhaos4.16.git84cfdc6.el8, cri-o-1.29.13-15.rhaos4.16.git84cfdc6.el9, cri-tools-1.29.0-9.el8 +23
  • RHSA-2026:67936 Released 2026-09-24 · Red Hat rating Important
    OpenShift Container Platform 4.16.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:71420 Released 2026-09-24 · Red Hat rating Important
    yggdrasil-worker-package-manager security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-worker-package-manager-0.2.3-6.el10_0.1
  • RHSA-2026:70640 Released 2026-09-24 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.3-2.el9_8, buildah-tests-2:1.43.3-2.el9_8
  • RHSA-2026:70641 Released 2026-09-24 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-8.el9_8, skopeo-tests-2:1.22.2-8.el9_8
  • RHSA-2026:71179 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9 +10
  • RHSA-2026:71114 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.33-1.el8ap, automation-gateway-proxy-server-2.5.10-8.el8ap, automation-gateway-server-2.5.20260923-1.el8ap +3
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.33-1.el9ap, automation-gateway-proxy-server-2.6.17-3.el9ap, automation-gateway-server-2.5.20260923-1.el9ap +3
  • RHSA-2026:71113 Released 2026-09-23 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 python-sqlparse-0.6.0-1.el10ap, python3-sqlparse-0.6.0-1.el10ap, receptor-1.6.8-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.17-1.el9ap, automation-controller-cli-4.7.17-1.el9ap, automation-controller-server-4.7.17-1.el9ap +7
  • RHSA-2026:71112 Released 2026-09-23 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.7 for RHEL 10 python-sqlparse-0.6.0-1.el10ap, python3-sqlparse-0.6.0-1.el10ap, receptor-1.6.8-1.el10ap
    • Red Hat Ansible Automation Platform 2.7 for RHEL 9 python3.12-sqlparse-0.6.0-1.el9ap, receptor-1.6.8-1.el9ap
  • RHSA-2026:70870 Released 2026-09-23 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.3
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:68534 Released 2026-09-23 · Red Hat rating Important
    OpenShift Container Platform 4.19.48 packages and security update
    • Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-14.rhaos4.19.git3c1400a.el9, openshift-4.19.0-202609141900.p2.g63adf01.assembly.stream.el9, openshift-clients-4.19.0-202609141900.p2.ga2c805b.assembly.stream.el8 +11
  • RHSA-2026:68540 Released 2026-09-23 · Red Hat rating Important
    OpenShift Container Platform 4.19.48 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:70593 Released 2026-09-23 · Red Hat rating Important
    Network Observability 1.12.3 for OpenShift
    • Network Observability (NETOBSERV) 1.12.3 registry.redhat.io/network-observability/network-observability-cli-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9, registry.redhat.io/network-observability/network-observability-console-plugin-rhel9
  • RHSA-2026:70191 Released 2026-09-23 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream (v. 9) runc-4:1.4.2-3.el9_8
  • RHSA-2026:70391 Released 2026-09-23 · Red Hat rating Important
    containernetworking-plugins security update
    • Red Hat Enterprise Linux AppStream (v. 9) containernetworking-plugins-1:1.9.0-4.el9_8
  • RHSA-2026:69961 Released 2026-09-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-7.el9_8, podman-docker-6:5.8.2-7.el9_8, podman-plugins-6:5.8.2-7.el9_8 +2
  • RHSA-2026:70395 Released 2026-09-22 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.16.2 release.
    • Red Hat Web Terminal 1.16 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:70394 Released 2026-09-22 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.17.1 release.
    • Red Hat Web Terminal 1.17 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:70393 Released 2026-09-22 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.15.2 release.
    • Red Hat Web Terminal 1.15 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:70392 Released 2026-09-22 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.14.1 release.
    • Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:70267 Released 2026-09-22 · Red Hat rating Important
    Red Hat Quay 3.14.9
    • Red Hat Quay 3.14 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:70201 Released 2026-09-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-9.el10_2, podman-docker-7:5.8.2-9.el10_2, podman-remote-7:5.8.2-9.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-9.el10_2
  • RHSA-2026:70103 Released 2026-09-22 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-worker-playbook-0.2.3-6.el10_0.1
  • RHSA-2026:70006 Released 2026-09-22 · Red Hat rating Important
    OpenShift Virtualization v4.14 Images
    • Red Hat Container Native Virtualization 4.14 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9
  • RHSA-2026:69945 Released 2026-09-22 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.2
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:69928 Released 2026-09-22 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.2
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:69917 Released 2026-09-22 · Red Hat rating Important
    OpenShift Source To Image 1.6.4
    • OpenShift Developer Tools and Services 1.6.4 registry.redhat.io/source-to-image/source-to-image-rhel8, registry.redhat.io/source-to-image/source-to-image-rhel9
  • RHSA-2026:69308 Released 2026-09-21 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2.3
  • RHSA-2026:69268 Released 2026-09-21 · Red Hat rating Important
    Red Hat build of OpenTelemetry 3.11.1 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator
  • RHSA-2026:69255 Released 2026-09-21 · Red Hat rating Important
    Red Hat Quay 3.16.6
    • Red Hat Quay 3.16 registry.redhat.io/quay/quay-rhel9
  • RHSA-2026:69248 Released 2026-09-21 · Red Hat rating Important
    Red Hat Developer Hub 1.9.9 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:69235 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-8.el8_6, osbuild-composer-core-46.3-8.el8_6, osbuild-composer-dnf-json-46.3-8.el8_6 +1
  • RHSA-2026:69107 Released 2026-09-21 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.6
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.6
  • RHSA-2026:69099 Released 2026-09-21 · Red Hat rating Important
    yggdrasil-worker-package-manager security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-worker-package-manager-0.2.3-7.el10_2.8
  • RHSA-2026:69104 Released 2026-09-21 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.5
  • RHSA-2026:69105 Released 2026-09-21 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-9.el9_4.1
  • RHSA-2026:69103 Released 2026-09-21 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-6.el10_0.1
  • RHSA-2026:68780 Released 2026-09-17 · Red Hat rating Critical
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:68695 Released 2026-09-17 · Red Hat rating Important
    Kiali 2.27.4 for Red Hat OpenShift Service Mesh 3.4
    • Red Hat OpenShift Service Mesh 3.4 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator
  • RHSA-2026:68690 Released 2026-09-17 · Red Hat rating Important
    Kiali 2.22.10 for Red Hat OpenShift Service Mesh 3.3
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:68691 Released 2026-09-17 · Red Hat rating Important
    Kiali 2.17.14 for Red Hat OpenShift Service Mesh 3.2
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:68689 Released 2026-09-17 · Red Hat rating Important
    Kiali 2.11.17 for Red Hat OpenShift Service Mesh 3.1
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:68687 Released 2026-09-17 · Red Hat rating Important
    Kiali 2.4.23 for Red Hat OpenShift Service Mesh 3.0
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9
  • RHSA-2026:68681 Released 2026-09-17 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.17 update
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-registry-rhel8, registry.redhat.io/rhmtc/openshift-migration-ui-rhel8
  • RHSA-2026:68527 Released 2026-09-17 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.152.1-2.el9_4
  • RHSA-2026:68515 Released 2026-09-17 · Red Hat rating Important
    Multicluster Global Hub 1.8.2 security update
    • Multicluster Global Hub 1.8.2 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:68504 Released 2026-09-17 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-10.el8_8, osbuild-composer-core-75-10.el8_8, osbuild-composer-dnf-json-75-10.el8_8 +1
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:68335 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • RHEM 1.2 for RHEL 10 flightctl-1.2.1-1.el10, flightctl-agent-1.2.1-1.el10, flightctl-cli-1.2.1-1.el10
    • RHEM 1.2 for RHEL 9 flightctl-1.2.1-1.el9, flightctl-agent-1.2.1-1.el9, flightctl-cli-1.2.1-1.el9
  • RHSA-2026:68349 Released 2026-09-16 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.13
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:68333 Released 2026-09-16 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-agent-init-rhel9, cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9 +5
  • RHSA-2026:68254 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +11
  • RHSA-2026:67975 Released 2026-09-16 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.152.1-2.el9_6
  • RHSA-2026:67974 Released 2026-09-16 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.152.1-2.el10_0
  • RHSA-2026:68044 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:68006 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.2.1 Security Update
    • Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:67842 Released 2026-09-16 · Red Hat rating Important
    Multicluster Global Hub 1.7.3 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:67714 Released 2026-09-15 · Red Hat rating Important
    RHACS 4.11.4 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes 4.11 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9, registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator, registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel9 +1
  • RHSA-2026:67711 Released 2026-09-15 · Red Hat rating Important
    RHACS 4.10.8 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8
  • RHSA-2026:67707 Released 2026-09-15 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-operator-bundle, registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:67571 Released 2026-09-15 · Red Hat rating Important
    Red Hat Web Terminal Operator 1.13.1 release.
    • Red Hat Web Terminal 1.13 registry.redhat.io/web-terminal/web-terminal-exec-rhel9
  • RHSA-2026:67518 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-23.el9_6, grafana-selinux-10.2.6-23.el9_6
  • RHSA-2026:66350 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 packages and security update
    • Red Hat OpenShift Container Platform 4.21 openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el10, openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el8, openshift-4.21.0-202609022229.p2.g93afd70.assembly.stream.el9 +20
  • RHSA-2026:67517 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-26.el10_0, grafana-selinux-10.2.6-26.el10_0
  • RHSA-2026:66375 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.20.38 packages and security update
    • Red Hat OpenShift Container Platform 4.20 openshift-4.20.0-202609041738.p2.g4012064.assembly.stream.el8, openshift-4.20.0-202609041738.p2.g4012064.assembly.stream.el9, openshift-hyperkube-4.20.0-202609041738.p2.g4012064.assembly.stream.el8 +9
  • RHSA-2026:66356 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 packages and security update
    • Red Hat OpenShift Container Platform 4.22 cri-o-1.35.7-10.rhaos4.22.git4c47184.el9, cri-tools-1.35.0-4.el9, openshift-4.22.0-202609021800.p2.g19365a0.assembly.stream.el8 +7
  • RHSA-2026:66358 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:66377 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.20.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:66352 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:67516 Released 2026-09-15 · Red Hat rating Important
    Multicluster Global Hub 1.4.9 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
  • RHSA-2026:67464 Released 2026-09-14 · Red Hat rating Important
    rhc-worker-playbook security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-worker-playbook-0.2.10-2.el10_2
  • RHSA-2026:67319 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.10
  • RHSA-2026:67313 Released 2026-09-14 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) delve-1.26.1-1.el9_2.1
  • RHSA-2026:67287 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.7
  • RHSA-2026:67161 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-13.el8_10
  • RHSA-2026:67149 Released 2026-09-14 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.7
  • RHSA-2026:67132 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-15.el9_6.1
  • RHSA-2026:67128 Released 2026-09-14 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) delve-1.26.1-1.el9_6.1
  • RHSA-2026:67159 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-9.el9_4
  • RHSA-2026:67153 Released 2026-09-14 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) delve-1.26.1-1.el9_4.1
  • RHSA-2026:67160 Released 2026-09-14 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.2
  • RHSA-2026:66459 Released 2026-09-11 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.3.0-1.el10_0.1
  • RHSA-2026:66523 Released 2026-09-10 · Red Hat rating Important
    Red Hat Quay 3.12.22
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66521 Released 2026-09-10 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.1
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/lokistack-gateway-rhel9 +1
  • RHSA-2026:66364 Released 2026-09-10 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.7.1-4.el9_8.3
  • RHSA-2026:66363 Released 2026-09-10 · Red Hat rating Important
    external secrets operator for Red Hat OpenShift 1.2.1
    • external secrets operator for Red Hat OpenShift 1.2 registry.redhat.io/external-secrets-operator/external-secrets-rhel9
  • RHSA-2026:66327 Released 2026-09-10 · Red Hat rating Important
    osbuild-composer security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-12.el10_0, osbuild-composer-core-134.1-12.el10_0, osbuild-composer-worker-134.1-12.el10_0
  • RHSA-2026:66084 Released 2026-09-09 · Red Hat rating Important
    Red Hat Quay 3.10.26
    • Red Hat Quay 3.10 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:66016 Released 2026-09-09 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101.5-2.el8_10, osbuild-composer-core-101.5-2.el8_10, osbuild-composer-worker-101.5-2.el8_10
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:65918 Released 2026-09-09 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-2.el10_0
  • RHSA-2026:65886 Released 2026-09-09 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-1.el9_8.2
  • RHSA-2026:65895 Released 2026-09-09 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-3.el10_2.2, osbuild-composer-core-165.1-3.el10_2.2, osbuild-composer-worker-165.1-3.el10_2.2
  • RHSA-2026:65880 Released 2026-09-09 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) ignition-2.17.0-2.el9_4.2, ignition-edge-2.17.0-2.el9_4.2, ignition-validate-2.17.0-2.el9_4.2
  • RHSA-2026:65534 Released 2026-09-08 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-1.el10_2.2
  • RHSA-2026:65514 Released 2026-09-08 · Red Hat rating Important
    Red Hat Quay 3.9.26
    • Red Hat Quay 3.9 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:65153 Released 2026-09-08 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-4.el9_8.1, osbuild-composer-core-165.1-4.el9_8.1, osbuild-composer-worker-165.1-4.el9_8.1
  • RHSA-2026:65336 Released 2026-09-08 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) ignition-2.21.0-7.el9_6.1, ignition-edge-2.21.0-7.el9_6.1, ignition-grub-2.21.0-7.el9_6.1 +1
  • RHSA-2026:65359 Released 2026-09-08 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) ignition-2.15.0-2.el9_2.1, ignition-edge-2.15.0-2.el9_2.1, ignition-validate-2.15.0-2.el9_2.1
  • RHSA-2026:65117 Released 2026-09-08 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.152.1-2.el9_8
  • RHSA-2026:65335 Released 2026-09-08 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) ignition-2.21.0-3.el10_0.4, ignition-edge-2.21.0-3.el10_0.4, ignition-validate-2.21.0-3.el10_0.4
  • RHSA-2026:65343 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:65116 Released 2026-09-08 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.152.1-2.el10_2
  • RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
    RHOAI 2.25.11 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:65121 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.4.2
    • Red Hat OpenShift Service Mesh 3.4 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:65115 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.3.7
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:65113 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.9
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:65112 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.12
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:65106 Released 2026-09-08 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.0.15
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:64788 Released 2026-09-08 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 10) git-lfs-3.7.1-5.el10_2.7
  • RHSA-2026:64818 Released 2026-09-08 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-5.el10_2, skopeo-tests-2:1.22.2-5.el10_2
  • RHSA-2026:64827 Released 2026-09-08 · Red Hat rating Important
    Red Hat Multiarch Tuning 1.3.4
    • Red Hat Multiarch Tuning 1.3.4 registry.redhat.io/multiarch-tuning/multiarch-tuning-rhel9-operator
  • RHSA-2026:64786 Released 2026-09-08 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-10.el8_10
  • RHSA-2026:64777 Released 2026-09-08 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-6.el10_2, buildah-tests-2:1.43.1-6.el10_2
  • RHSA-2026:63163 Released 2026-09-04 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24790+ef71b018.s390x::container-tools:rhel8 +47
  • RHSA-2026:63127 Released 2026-09-04 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-7.el10_2
  • RHSA-2026:63332 Released 2026-09-04 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-5.el10_2, buildah-tests-2:1.43.1-5.el10_2
  • RHSA-2026:63119 Released 2026-09-03 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-8.el10_2.1
  • RHSA-2026:63124 Released 2026-09-03 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-18.el8_10
  • RHSA-2026:63136 Released 2026-09-03 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-17.el9_8.1
  • RHSA-2026:63130 Released 2026-09-03 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-11.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-11.el9_8
  • RHSA-2026:63022 Released 2026-09-03 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-28.el10_2.5, grafana-selinux-10.2.6-28.el10_2.5
  • RHSA-2026:62866 Released 2026-09-02 · Red Hat rating Important
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-3 This version is a rebuild of 2.19.0 using a newer base image, Go modules and Go compiler, and two bug fixes. See the release notes for more information.
    • Custom Metric Autoscaler 2.19 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-http-add-on-interceptor-rhel9 +5
  • RHSA-2026:62851 Released 2026-09-02 · Red Hat rating Important
    Red Hat Developer Hub 1.10.4 release.
    • Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:62803 Released 2026-09-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-12.el9_6, osbuild-composer-core-132.2-12.el9_6, osbuild-composer-worker-132.2-12.el9_6
  • RHSA-2026:62753 Released 2026-09-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.6, osbuild-composer-core-101.3-4.el9_4.6, osbuild-composer-worker-101.3-4.el9_4.6
  • RHSA-2026:62754 Released 2026-09-02 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-9.el9_2, osbuild-composer-core-76.1-9.el9_2, osbuild-composer-dnf-json-76.1-9.el9_2 +1
  • RHSA-2026:62631 Released 2026-09-02 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2.3
  • RHSA-2026:62602 Released 2026-09-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.7-1.el9_2, golang-1.26.7-1.el9_2, golang-bin-1.26.7-1.el9_2 +5
  • RHSA-2026:62578 Released 2026-09-02 · Red Hat rating Important
    go-fdo-server security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-server-1.0.1-2.el10_2.4, go-fdo-server-manufacturer-1.0.1-2.el10_2.4, go-fdo-server-owner-1.0.1-2.el10_2.4 +1
  • RHSA-2026:62577 Released 2026-09-02 · Red Hat rating Important
    go-fdo-client security update
    • Red Hat Enterprise Linux AppStream (v. 10) go-fdo-client-1.0.0-4.el10_2.7
  • RHSA-2026:62406 Released 2026-09-02 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-23.el9_8.3, grafana-selinux-10.2.6-23.el9_8.3
  • RHSA-2026:62407 Released 2026-09-02 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-33.el8_10, grafana-selinux-9.2.10-33.el8_10
  • RHSA-2026:62404 Released 2026-09-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.7-1.el9_6, golang-1.26.7-1.el9_6, golang-bin-1.26.7-1.el9_6 +5
  • RHSA-2026:62405 Released 2026-09-02 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.7-1.el9_4, golang-1.26.7-1.el9_4, golang-bin-1.26.7-1.el9_4 +5
  • RHSA-2026:61882 Released 2026-09-01 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.7-1.el10_0, golang-1.26.7-1.el10_0, golang-bin-1.26.7-1.el10_0 +5
  • RHSA-2026:60305 Released 2026-08-26 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8 +22
  • RHSA-2026:60304 Released 2026-08-26 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.7-1.el9_8, golang-1.26.7-1.el9_8, golang-bin-1.26.7-1.el9_8 +5
  • RHSA-2026:60306 Released 2026-08-26 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.7-1.el10_2, golang-1.26.7-1.el10_2, golang-bin-1.26.7-1.el10_2 +5
  • RHSA-2026:54836 Released 2026-08-14 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.25-1.25.13-0.1.hum1@aarch64, golang1.25-1.25.13-0.1.hum1@src, golang1.25-1.25.13-0.1.hum1@x86_64 +10
  • RHSA-2026:54835 Released 2026-08-14 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.6-0.1.hum1@aarch64, golang1.26-1.26.6-0.1.hum1@src, golang1.26-1.26.6-0.1.hum1@x86_64 +10

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
AWS Load Balancer OperatorAffectedNo fix yet
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Confidential Compute AttestationAffectedNo fix yet
Deployment Validation OperatorAffectedNo fix yet
Exploit IntelligenceAffectedNo fix yet
ExternalDNS OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix yet
Logical Volume Manager StorageAffectedNo fix yet
Machine Deletion Remediation OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ceph Storage 5AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 6AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 7AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 8AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 9AffectedNo fix yet: Fix deferred
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Service Interconnect 1AffectedNo fix yet
Red Hat Service Interconnect 2AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Secrets Management Console for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
mirror registry for Red Hat OpenShift 2AffectedNo fix yet
streams for Apache Kafka 3AffectedNo fix yet
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:90332
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372
Cluster Observability Operator 1.5Fixed RHSA-2026:95081, RHSA-2026:95591
Cryostat 4 on RHEL 9Fixed RHSA-2026:68333
Custom Metric Autoscaler 2.19Fixed RHSA-2026:62866
DevWorkspace Operator 1.0Fixed RHSA-2026:85247
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:68349
Logging Subsystem for Red Hat OpenShift 6.5Fixed RHSA-2026:70870
Logging Subsystem for Red Hat OpenShift 6.6Fixed RHSA-2026:66521
Logical Volume Manager Storage 4.12Fixed RHSA-2026:88199
Logical Volume Manager Storage 4.14Fixed RHSA-2026:90758
Logical Volume Manager Storage 4.16Fixed RHSA-2026:92291
Logical Volume Manager Storage 4.17Fixed RHSA-2026:93598
Logical Volume Manager Storage 4.18Fixed RHSA-2026:94489
Logical Volume Manager Storage 4.19Fixed RHSA-2026:94587
Logical Volume Manager Storage 4.20Fixed RHSA-2026:95437
Multicluster Global Hub 1.4.9Fixed RHSA-2026:67516
Multicluster Global Hub 1.5.8Fixed RHSA-2026:71597
Multicluster Global Hub 1.6.6Fixed RHSA-2026:73419
Multicluster Global Hub 1.7.4Fixed RHSA-2026:67842
Multicluster Global Hub 1.8.2Fixed RHSA-2026:68515, RHSA-2026:73038
Network Observability (NETOBSERV) 1.12.3Fixed RHSA-2026:70593
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
OpenShift Compliance Operator 1Fixed RHSA-2026:67707, RHSA-2026:95612
OpenShift Developer Tools and Services 1.6.4Fixed RHSA-2026:69917
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2026:74025
OpenShift Security Profiles Operator 1Fixed RHSA-2026:76752
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
RHEM 1.2 for RHEL 10Fixed RHSA-2026:68335
RHEM 1.2 for RHEL 9Fixed RHSA-2026:68335
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2026:72882
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:72885, RHSA-2026:92307
Red Hat Advanced Cluster Security for Kubernetes 4.11Fixed RHSA-2026:67714
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Fixed RHSA-2026:67711
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:71114
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:71114
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:71179
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:71113
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:71113
Red Hat Ansible Automation Platform 2.7 for RHEL 10Fixed RHSA-2026:71112
Red Hat Ansible Automation Platform 2.7 for RHEL 9Fixed RHSA-2026:71112
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:69107
Red Hat Container Native Virtualization 4.14Fixed RHSA-2026:70006
Red Hat Container Native Virtualization 4.16Fixed RHSA-2026:73348
Red Hat Container Native Virtualization 4.17Fixed RHSA-2026:93959
Red Hat Container Native Virtualization 4.18Fixed RHSA-2026:73413
Red Hat Container Native Virtualization 4.19Fixed RHSA-2026:73195
Red Hat Container Native Virtualization 4.21Fixed RHSA-2026:75863
Red Hat Container Native Virtualization 4.22Fixed RHSA-2026:82843
Red Hat Cost Management On-Premise 1Fixed RHSA-2026:91216
Red Hat Developer Hub 1.10Fixed RHSA-2026:62851
Red Hat Developer Hub 1.9Fixed RHSA-2026:69248
Red Hat Edge Manager 1.1Fixed RHSA-2026:68044
Red Hat Edge Manager 1.2Fixed RHSA-2026:68006, RHSA-2026:68254
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:60306, RHSA-2026:62577, RHSA-2026:62578, RHSA-2026:62631, RHSA-2026:63022, RHSA-2026:63119, RHSA-2026:63127, RHSA-2026:63332, RHSA-2026:64777, RHSA-2026:64788, RHSA-2026:64818, RHSA-2026:65116, RHSA-2026:65534, RHSA-2026:65895, RHSA-2026:67464, RHSA-2026:69099, RHSA-2026:69308, RHSA-2026:70201
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:60305, RHSA-2026:62407, RHSA-2026:63124, RHSA-2026:63163, RHSA-2026:64786, RHSA-2026:66016, RHSA-2026:67161
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:60304, RHSA-2026:62406, RHSA-2026:63130, RHSA-2026:63136, RHSA-2026:65117, RHSA-2026:65153, RHSA-2026:65886, RHSA-2026:66364, RHSA-2026:69961, RHSA-2026:70191, RHSA-2026:70391, RHSA-2026:70640, RHSA-2026:70641
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:62602, RHSA-2026:62754, RHSA-2026:65359, RHSA-2026:67160, RHSA-2026:67313, RHSA-2026:67319, RHSA-2026:69104, RHSA-2026:76809
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:62405, RHSA-2026:62753, RHSA-2026:65880, RHSA-2026:67153, RHSA-2026:67159, RHSA-2026:68527, RHSA-2026:69105, RHSA-2026:72276, RHSA-2026:76795
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:61882, RHSA-2026:65335, RHSA-2026:65918, RHSA-2026:66327, RHSA-2026:66459, RHSA-2026:67149, RHSA-2026:67517, RHSA-2026:67974, RHSA-2026:69103, RHSA-2026:70103, RHSA-2026:71420
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:62404, RHSA-2026:62803, RHSA-2026:65336, RHSA-2026:67128, RHSA-2026:67132, RHSA-2026:67287, RHSA-2026:67518, RHSA-2026:67975, RHSA-2026:69107
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:69235, RHSA-2026:72805, RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:68504, RHSA-2026:72737, RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:69308, RHSA-2026:70201
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:63130
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:71619
Red Hat Hardened ImagesFixed RHSA-2026:54835, RHSA-2026:54836
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:73538
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:68681
Red Hat Migration Toolkit for Applications 8.2Fixed RHSA-2026:82315
Red Hat Multiarch Tuning 1.3.4Fixed RHSA-2026:64827
Red Hat OpenShift AI 2.25Fixed RHSA-2026:65126, RHSA-2026:87410
Red Hat OpenShift AI 3.3Fixed RHSA-2026:73987
Red Hat OpenShift AI 3.4Fixed RHSA-2026:84734, RHSA-2026:92510
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:69945
Red Hat OpenShift Builds 1.9.2Fixed RHSA-2026:89041, RHSA-2026:89131
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:70645, RHSA-2026:70647
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:73864, RHSA-2026:73869
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:82810
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:67934, RHSA-2026:67936, RHSA-2026:83631
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:70585, RHSA-2026:70587
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:70614, RHSA-2026:70617, RHSA-2026:80167
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:68534, RHSA-2026:68540, RHSA-2026:91191
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:66375, RHSA-2026:66377, RHSA-2026:74797
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:66350, RHSA-2026:66352, RHSA-2026:71443, RHSA-2026:74796
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:66356, RHSA-2026:66358, RHSA-2026:71445, RHSA-2026:71672
Red Hat OpenShift GitOps 1.20Fixed RHSA-2026:77273
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:65106, RHSA-2026:68687
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:65112, RHSA-2026:68689
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:65113, RHSA-2026:68691
Red Hat OpenShift Service Mesh 3.3Fixed RHSA-2026:65115, RHSA-2026:68690
Red Hat OpenShift Service Mesh 3.4Fixed RHSA-2026:65121, RHSA-2026:68695
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:65343, RHSA-2026:69268
Red Hat OpenStack 1.5Fixed RHSA-2026:77532
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:90330, RHSA-2026:95206
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:80684, RHSA-2026:90329
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:90332, RHSA-2026:95576
Red Hat Quay 3.10Fixed RHSA-2026:66084
Red Hat Quay 3.12Fixed RHSA-2026:66523
Red Hat Quay 3.14Fixed RHSA-2026:70267
Red Hat Quay 3.16Fixed RHSA-2026:69255
Red Hat Quay 3.17Fixed RHSA-2026:74511
Red Hat Quay 3.9Fixed RHSA-2026:65514
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:74506
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:74506
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:74505
Red Hat Satellite 6.18Fixed RHSA-2026:74632
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:74504
Red Hat Satellite 6.19Fixed RHSA-2026:68780
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:74503
Red Hat Web Terminal 1.11Fixed RHSA-2026:77899
Red Hat Web Terminal 1.13Fixed RHSA-2026:67571
Red Hat Web Terminal 1.14Fixed RHSA-2026:70392
Red Hat Web Terminal 1.15Fixed RHSA-2026:70393
Red Hat Web Terminal 1.16Fixed RHSA-2026:70395
Red Hat Web Terminal 1.17Fixed RHSA-2026:70394
Satellite Client 6 for RHEL 10Fixed RHSA-2026:94063
Satellite Client 6 for RHEL 8Fixed RHSA-2026:94063
Satellite Client 6 for RHEL 9Fixed RHSA-2026:94063
external secrets operator for Red Hat OpenShift 1.2Fixed RHSA-2026:66363
multicluster engine for Kubernetes 2.10Fixed RHSA-2026:72853
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:72848
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:72850
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:72854, RHSA-2026:92303
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:72851
Not affected: 128 products
  • AWS Load Balancer Operator
  • Cluster Observability Operator 1.5
  • Cost Management On Premise
  • Cryostat 4
  • Cryostat 4 on RHEL 9
  • DevWorkspace Operator 1.0
  • File Integrity Operator
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.5
  • Logging Subsystem for Red Hat OpenShift 6.6
  • Logical Volume Manager Storage 4.12
  • Logical Volume Manager Storage 4.14
  • Logical Volume Manager Storage 4.16
  • Logical Volume Manager Storage 4.17
  • Logical Volume Manager Storage 4.18
  • Logical Volume Manager Storage 4.19
  • Logical Volume Manager Storage 4.20
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Multicluster Global Hub 1.7.4
  • Multicluster Global Hub 1.8.2
  • Network Observability (NETOBSERV) 1.12.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift Compliance Operator 1
  • OpenShift Developer Tools and Services 1.6.4
  • OpenShift File Integrity Operator - FIO 1
  • OpenShift Security Profiles Operator 1
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • RHEM 1.2 for RHEL 10
  • RHEM 1.2 for RHEL 9
  • Red Hat AMQ Clients
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Security for Kubernetes 4.11
  • Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Ansible Automation Platform 2.7 for RHEL 10
  • Red Hat Ansible Automation Platform 2.7 for RHEL 9
  • Red Hat Container Native Virtualization 4.14
  • Red Hat Container Native Virtualization 4.16
  • Red Hat Container Native Virtualization 4.17
  • Red Hat Container Native Virtualization 4.18
  • Red Hat Container Native Virtualization 4.19
  • Red Hat Container Native Virtualization 4.21
  • Red Hat Container Native Virtualization 4.22
  • Red Hat Developer Hub 1.10
  • Red Hat Developer Hub 1.9
  • Red Hat Edge Manager 1.1
  • Red Hat Edge Manager 1.2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Hardened Images
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat Migration Toolkit for Applications 8.2
  • Red Hat Multiarch Tuning 1.3.4
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Builds 1.9.2
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift GitOps 1.20
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift Service Mesh 3.3
  • Red Hat OpenShift Service Mesh 3.4
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat OpenStack 1.5
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Quay 3.10
  • Red Hat Quay 3.12
  • Red Hat Quay 3.14
  • Red Hat Quay 3.16
  • Red Hat Quay 3.17
  • Red Hat Quay 3.9
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Red Hat Service Interconnect 2
  • Red Hat Web Terminal 1.11
  • Red Hat Web Terminal 1.13
  • Red Hat Web Terminal 1.14
  • Red Hat Web Terminal 1.15
  • Red Hat Web Terminal 1.16
  • Red Hat Web Terminal 1.17
  • Satellite Client 6 for RHEL 10
  • Satellite Client 6 for RHEL 7
  • Satellite Client 6 for RHEL 8
  • Satellite Client 6 for RHEL 9
  • multicluster engine for Kubernetes 2.10
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9
  • streams for Apache Kafka 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56860
  2. 2026-10-03 Alias added: GHSA-25mv-j2qr-v5jq
  3. 2026-10-06 Fix available: RHSA-2026:75863 · Red Hat
  4. 2026-10-06 Fix available: Red Hat Container Native Virtualization 4.21 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
  6. 2026-10-07 Fix available: RHSA-2026:74796 · Red Hat
  7. 2026-10-07 Fix available: RHSA-2026:76795 · Red Hat
  8. 2026-10-07 Fix available: RHSA-2026:77273 · Red Hat
  9. 2026-10-07 Fix available: RHSA-2026:76809 · Red Hat
  10. 2026-10-07 Fix available: Red Hat OpenShift GitOps 1.20 · Red Hat
  11. 2026-10-07 Fix available: RHSA-2026:77532 · Red Hat
  12. 2026-10-07 Fix available: RHSA-2026:76752 · Red Hat
  13. 2026-10-07 Fix available: OpenShift Security Profiles Operator 1, Red Hat OpenStack 1.5 · Red Hat
  14. 2026-10-09 Fix available: RHSA-2026:73864 · Red Hat
  15. 2026-10-09 Fix available: RHSA-2026:73869 · Red Hat
  16. 2026-10-09 Fix available: RHSA-2026:74797 · Red Hat
  17. 2026-10-09 Fix available: RHSA-2026:77899 · Red Hat
  18. 2026-10-09 Fix available: Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift distributed tracing 3.11.2, Red Hat Web Terminal 1.11 · Red Hat
  19. 2026-10-10 Fix available: Compliance Operator 1 · Red Hat
  20. 2026-10-13 Fix available: RHSA-2026:80684 · Red Hat
  21. 2026-10-13 Fix available: Red Hat OpenShift distributed tracing 3.11, Red Hat OpenStack Platform 17.1 · Red Hat
  22. 2026-10-14 Fix available: RHSA-2026:82315 · Red Hat
  23. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  24. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  25. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  26. 2026-10-15 Fix available: RHSA-2026:82843 · Red Hat
  27. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  28. 2026-10-16 Fix available: RHSA-2026:80167 · Red Hat
  29. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0, Red Hat Container Native Virtualization 4.22 +1 · Red Hat
  30. 2026-10-20 Fix available: RHSA-2026:83631 · Red Hat
  31. 2026-10-20 Fix available: RHSA-2026:85247 · Red Hat
  32. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  33. 2026-10-20 Fix available: DevWorkspace Operator 1.0, Red Hat OpenShift AI 3.4 · Red Hat
  34. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  35. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  36. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  37. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  38. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  39. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  40. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  41. 2026-10-23 Fix available: RHSA-2026:88199 · Red Hat
  42. 2026-10-23 Fix available: RHSA-2026:82810 · Red Hat
  43. 2026-10-23 Fix available: Logical Volume Manager Storage 4.12, Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4.11, Red Hat OpenShift Container Platform 4.15 · Red Hat
  44. 2026-10-24 Fix available: Red Hat OpenShift distributed tracing 3.11.3 · Red Hat
  45. 2026-10-25 Fix available: RHSA-2026:89131 · Red Hat
  46. 2026-10-25 Fix available: RHSA-2026:89041 · Red Hat
  47. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3, Red Hat OpenShift Builds 1.9.2 · Red Hat
  48. 2026-10-26 Fix available: RHSA-2026:90332 · Red Hat
  49. 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
  50. 2026-10-26 Fix available: 9Base-RHOSO-TOOLS-18, Red Hat OpenShift distributed tracing 3.11, Red Hat OpenStack Services on OpenShift 18.0 · Red Hat
  51. 2026-10-27 Fix available: Red Hat OpenStack Platform 16.2 · Red Hat
  52. 2026-10-27 Affected versions changed · Red Hat
  53. 2026-10-29 Fix available: RHSA-2026:90330 · Red Hat
  54. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  55. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  56. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  57. 2026-10-29 Fix available: RHSA-2026:91191 · Red Hat
  58. 2026-10-29 Fix available: Logical Volume Manager Storage 4.14, Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · Red Hat
  59. 2026-10-30 Fix available: RHSA-2026:90758 · Red Hat
  60. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  61. 2026-10-30 Fix available: RHSA-2026:91216 · Red Hat
  62. 2026-10-30 Fix available: RHSA-2026:92303 · Red Hat
  63. 2026-10-30 Fix available: RHSA-2026:92291 · Red Hat
  64. 2026-10-30 Fix available: RHSA-2026:92307 · Red Hat
  65. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  66. 2026-10-30 Fix available: Logical Volume Manager Storage 4.16, Red Hat Cost Management On-Premise 1 · Red Hat
  67. 2026-10-31 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11 · Red Hat
  68. 2026-11-03 Fix available: Satellite Client 6 for RHEL 10, Satellite Client 6 for RHEL 8, Satellite Client 6 for RHEL 9 · Red Hat
  69. 2026-11-03 Fix available: RHSA-2026:93598 · Red Hat
  70. 2026-11-03 Fix available: RHSA-2026:93959 · Red Hat
  71. 2026-11-03 Fix available: RHSA-2026:94063 · Red Hat
  72. 2026-11-03 Fix available: Logical Volume Manager Storage 4.17, Red Hat Container Native Virtualization 4.17 · Red Hat
  73. 2026-11-04 Affected versions changed · Red Hat
  74. 2026-11-04 Fix available: RHSA-2026:94587 · Red Hat
  75. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  76. 2026-11-04 Fix available: RHSA-2026:94489 · Red Hat
  77. 2026-11-04 Fix available: Logical Volume Manager Storage 4.18, Logical Volume Manager Storage 4.19, OpenShift API for Data Protection 1.4 · Red Hat
  78. 2026-11-04 Fix available: RHSA-2026:95081 · Red Hat
  79. 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
  80. 2026-11-04 Fix available: Cluster Observability Operator 1.5, Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 · Red Hat
  81. 2026-11-05 Affected versions changed · Red Hat
  82. 2026-11-06 Fix available: Logical Volume Manager Storage 4.20, Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat
  83. 2026-11-06 Fix available: RHSA-2026:95437 · Red Hat
  84. 2026-11-06 Fix available: RHSA-2026:95591 · Red Hat
  85. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  86. 2026-11-06 Fix available: RHSA-2026:95576 · Red Hat
  87. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  88. 2026-11-06 Affected versions changed · Red Hat

References

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences