Read the docs
TI-2026-45095 Aliases CVE-2026-63209GHSA-259r-337f-4rfw

Integer Overflow or Wraparound and Out-of-bounds Write in compress

Priority MEDIUM 40CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 16 fixed, 19 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00572 47th percentileScored 2026-11-07
Fix Partial compress (klauspost): 1.18.7github.com/klauspost/compress (Go): 1.18.7Red Hat: 42 advisoriesRed Hat: 16 fixed, 19 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
klauspostcompressbefore 1.18.71.18.7Patch availableCNA
—github.com/klauspost/compress (Go)before 1.18.71.18.7Patch availableGHSA-259r-337f-4rfw
  • compress Vendorklauspost Affected before 1.18.7 Fixed in 1.18.7 Patch available CNA
  • github.com/klauspost/compress (Go) Vendor— Affected before 1.18.7 Fixed in 1.18.7 Patch available GHSA-259r-337f-4rfw

Remediation

  • Fix · CNA compress (klauspost) Fixed in 1.18.7
  • Fix · GHSA-259r-337f-4rfw github.com/klauspost/compress (Go) Fixed in 1.18.7 Advisory →

Red Hat 42 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:95591 Released 2026-11-05 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:95517 Released 2026-11-05 · Red Hat rating Important
    Multicluster Global Hub 1.7.4 security update
    • Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
Show 39 more Red Hat advisories
  • RHSA-2026:95081 Released 2026-11-04 · Red Hat rating Important
    Cluster Observability Operator - 1.5
    • Cluster Observability Operator 1.5 registry.redhat.io/cluster-observability-operator/alertmanager-rhel9, registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator, registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9 +16
  • RHSA-2026:94498 Released 2026-11-03 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection - 1.4.12
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-cli-binaries-rhel9, registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9 +8
  • RHSA-2026:92994 Released 2026-11-03 · Red Hat rating Important
    OpenShift Container Platform 4.21.41 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:92593 Released 2026-10-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.2
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:92515 Released 2026-10-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.6.2
    • Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:92307 Released 2026-10-29 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.14 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +16
  • RHSA-2026:92303 Released 2026-10-29 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.12 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9 +12
  • RHSA-2026:89198 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.22.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 3.5.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47
  • RHSA-2026:85227 Released 2026-10-19 · Red Hat rating Important
    Submariner v0.23 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/subctl-rhel9 +4
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:79368 Released 2026-10-08 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2
  • RHSA-2026:72570 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.6-3.6.17-0.3.hum1@aarch64, loki3.6-3.6.17-0.3.hum1@src, loki3.6-3.6.17-0.3.hum1@x86_64 +4
  • RHSA-2026:72507 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.2-13.2.1-0.8.hum1@aarch64, grafana13.2-13.2.1-0.8.hum1@src, grafana13.2-13.2.1-0.8.hum1@x86_64
  • RHSA-2026:72498 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.1-13.1.6-0.4.hum1@aarch64, grafana13.1-13.1.6-0.4.hum1@src, grafana13.1-13.1.6-0.4.hum1@x86_64
  • RHSA-2026:72497 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana12.4-12.4.10-0.9.hum1@aarch64, grafana12.4-12.4.10-0.9.hum1@src, grafana12.4-12.4.10-0.9.hum1@x86_64
  • RHSA-2026:72496 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.7-3.7.8-0.3.hum1@aarch64, loki3.7-3.7.8-0.3.hum1@src, loki3.7-3.7.8-0.3.hum1@x86_64 +4
  • RHSA-2026:72493 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.15-1.15.3-0.2.hum1@aarch64, spire1.15-1.15.3-0.2.hum1@src, spire1.15-1.15.3-0.2.hum1@x86_64 +6
  • RHSA-2026:72492 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images trivy-0.74.0-0.4.hum1@aarch64, trivy-0.74.0-0.4.hum1@src, trivy-0.74.0-0.4.hum1@x86_64
  • RHSA-2026:72491 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images tempo3.0-3.0.3-0.4.hum1@aarch64, tempo3.0-3.0.3-0.4.hum1@src, tempo3.0-3.0.3-0.4.hum1@x86_64
  • RHSA-2026:72490 Released 2026-09-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images tempo2.10-2.10.8-0.4.hum1@aarch64, tempo2.10-2.10.8-0.4.hum1@src, tempo2.10-2.10.8-0.4.hum1@x86_64
  • RHSA-2026:70726 Released 2026-09-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images podman-5:6.1.2-1.hum1@aarch64, podman-5:6.1.2-1.hum1@src, podman-5:6.1.2-1.hum1@x86_64 +8
  • RHSA-2026:70684 Released 2026-09-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images skopeo-1:1.24.1-1.hum1@aarch64, skopeo-1:1.24.1-1.hum1@src, skopeo-1:1.24.1-1.hum1@x86_64 +2
  • RHSA-2026:70670 Released 2026-09-23 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images buildah-1.45.1-1.hum1@aarch64, buildah-1.45.1-1.hum1@src, buildah-1.45.1-1.hum1@x86_64
  • RHSA-2026:70031 Released 2026-09-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images k6v2-2.3.0-0.1.hum1@aarch64, k6v2-2.3.0-0.1.hum1@src, k6v2-2.3.0-0.1.hum1@x86_64
  • RHSA-2026:68808 Released 2026-09-18 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images syft-1.52.0-0.1.hum1@aarch64, syft-1.52.0-0.1.hum1@src, syft-1.52.0-0.1.hum1@x86_64
  • RHSA-2026:68806 Released 2026-09-18 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images grype-0.119.0-0.1.hum1@aarch64, grype-0.119.0-0.1.hum1@src, grype-0.119.0-0.1.hum1@x86_64
  • RHSA-2026:68729 Released 2026-09-17 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images helm4-4.3.0-0.2.hum1@aarch64, helm4-4.3.0-0.2.hum1@src, helm4-4.3.0-0.2.hum1@x86_64
  • RHSA-2026:68717 Released 2026-09-17 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images helm3-3.22.0-0.2.hum1@aarch64, helm3-3.22.0-0.2.hum1@src, helm3-3.22.0-0.2.hum1@x86_64
  • RHSA-2026:68591 Released 2026-09-17 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-k8s-0.161.0-0.1.hum1@aarch64, opentelemetry-collector-k8s-0.161.0-0.1.hum1@src, opentelemetry-collector-k8s-0.161.0-0.1.hum1@x86_64
  • RHSA-2026:68290 Released 2026-09-16 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-contrib-0.161.0-0.1.hum1@aarch64, opentelemetry-collector-contrib-0.161.0-0.1.hum1@src, opentelemetry-collector-contrib-0.161.0-0.1.hum1@x86_64
  • RHSA-2026:68272 Released 2026-09-16 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images opentelemetry-collector-0.161.0-0.1.hum1@aarch64, opentelemetry-collector-0.161.0-0.1.hum1@src, opentelemetry-collector-0.161.0-0.1.hum1@x86_64
  • RHSA-2026:68256 Released 2026-09-16 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images nats-server2.14-2.14.7-0.1.hum1@aarch64, nats-server2.14-2.14.7-0.1.hum1@src, nats-server2.14-2.14.7-0.1.hum1@x86_64
  • RHSA-2026:58472 Released 2026-08-22 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images rekor-1.5.4-0.1.hum1@src, rekor-server-1.5.4-0.1.hum1@aarch64, rekor-server-1.5.4-0.1.hum1@x86_64
  • RHSA-2026:54419 Released 2026-08-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images k6v1-1.8.1-0.1.hum1@aarch64, k6v1-1.8.1-0.1.hum1@src, k6v1-1.8.1-0.1.hum1@x86_64
  • RHSA-2026:54413 Released 2026-08-12 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images nats-server2.12-2.12.15-0.1.hum1@aarch64, nats-server2.12-2.12.15-0.1.hum1@src, nats-server2.12-2.12.15-0.1.hum1@x86_64

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Cryostat 4Affected—
File Integrity OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Network Observability OperatorAffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ceph Storage 6Affected—
Red Hat Ceph Storage 7Affected—
Red Hat Ceph Storage 8Affected—
Red Hat Ceph Storage 9Affected—
Red Hat Enterprise Linux 10Affected—
Red Hat Enterprise Linux 9Affected—
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat Openshift Data Foundation 4Affected—
Red Hat Trusted Artifact SignerAffected—
Cluster Observability Operator 1.5Fixed RHSA-2026:95081, RHSA-2026:95591
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.6Fixed RHSA-2026:92515
Multicluster Global Hub 1.7.4Fixed RHSA-2026:95517
OpenShift API for Data Protection 1.4Fixed RHSA-2026:94498
OpenShift Compliance Operator 1Fixed RHSA-2026:95612
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:92307
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:85227
Red Hat Hardened ImagesFixed RHSA-2026:54413, RHSA-2026:54419, RHSA-2026:58472, RHSA-2026:68256, RHSA-2026:68272, RHSA-2026:68290, RHSA-2026:68591, RHSA-2026:68717, RHSA-2026:68729, RHSA-2026:68806, RHSA-2026:68808, RHSA-2026:70031, RHSA-2026:70670, RHSA-2026:70684, RHSA-2026:70726, RHSA-2026:72490, RHSA-2026:72491, RHSA-2026:72492, RHSA-2026:72493, RHSA-2026:72496, RHSA-2026:72497, RHSA-2026:72498, RHSA-2026:72507, RHSA-2026:72570
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.4Fixed RHSA-2026:84734, RHSA-2026:92510
Red Hat OpenShift AI 3.5Fixed RHSA-2026:86891
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:92994
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:89198
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:79368
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:92303
Not affected: 25 products
  • Cluster Observability Operator 1.5
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • Logging Subsystem for Red Hat OpenShift
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.6
  • Multicluster Global Hub 1.7.4
  • OpenShift API for Data Protection 1.4
  • OpenShift Compliance Operator 1
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Security 4
  • Red Hat Hardened Images
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift AI 3.5
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat Quay 3
  • multicluster engine for Kubernetes 2.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-63209
  2. 2026-10-05 Affected versions changed · Red Hat
  3. 2026-10-06 Affected versions changed · Red Hat
  4. 2026-10-07 Affected versions changed · Red Hat
  5. 2026-10-08 Affected versions changed · Red Hat
  6. 2026-10-09 Fix available: RHSA-2026:79368 · Red Hat
  7. 2026-10-09 Fix available: Red Hat OpenShift distributed tracing 3.11.2 · Red Hat
  8. 2026-10-13 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  9. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  10. 2026-10-16 Fix available: Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  11. 2026-10-20 Fix available: RHSA-2026:85227 · Red Hat
  12. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  13. 2026-10-20 Fix available: Red Hat Advanced Cluster Management for Kubernetes 2.16, Red Hat OpenShift AI 3.4 · Red Hat
  14. 2026-10-20 Alias added: GHSA-259r-337f-4rfw
  15. 2026-10-20 Fix available: Go/github.com/klauspost/[email protected] · GHSA-259r-337f-4rfw
  16. 2026-10-20 CVSS score added · GHSA-259r-337f-4rfw
  17. 2026-10-20 Weakness changed · GHSA-259r-337f-4rfw
  18. 2026-10-20 7 new references · GHSA-259r-337f-4rfw
  19. 2026-10-21 Affected versions changed · Red Hat
  20. 2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
  21. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  22. 2026-10-23 Fix available: Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.5, Red Hat OpenShift distributed tracing 3.11.3 · Red Hat
  23. 2026-10-26 Fix available: Red Hat OpenShift distributed tracing 3.11 · Red Hat
  24. 2026-10-29 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat
  25. 2026-10-30 Fix available: RHSA-2026:92303 · Red Hat
  26. 2026-10-30 Fix available: RHSA-2026:92307 · Red Hat
  27. 2026-10-30 Fix available: RHSA-2026:89198 · Red Hat
  28. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  29. 2026-10-30 Fix available: Red Hat Advanced Cluster Management for Kubernetes 2.13, multicluster engine for Kubernetes 2.8 · Red Hat
  30. 2026-10-30 Affected versions changed · Red Hat
  31. 2026-10-30 Fix available: Logging Subsystem for Red Hat OpenShift 6.6 · Red Hat
  32. 2026-10-31 Priority changed: LOW → MEDIUM
  33. 2026-10-31 Fix available: RHSA-2026:92593 · Red Hat
  34. 2026-10-31 Fix available: RHSA-2026:92515 · Red Hat
  35. 2026-11-03 Fix available: RHSA-2026:92994 · Red Hat
  36. 2026-11-03 Fix available: Red Hat OpenShift Container Platform 4.21 · Red Hat
  37. 2026-11-04 Fix available: RHSA-2026:94498 · Red Hat
  38. 2026-11-04 Fix available: OpenShift API for Data Protection 1.4 · Red Hat
  39. 2026-11-04 Fix available: RHSA-2026:95081 · Red Hat
  40. 2026-11-04 Fix available: Cluster Observability Operator 1.5 · Red Hat
  41. 2026-11-06 Fix available: Multicluster Global Hub 1.7.4, OpenShift Compliance Operator 1 · Red Hat
  42. 2026-11-06 Fix available: RHSA-2026:95591 · Red Hat
  43. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  44. 2026-11-06 Fix available: RHSA-2026:95517 · Red Hat

References

Advisory 1

Other 6

  • TI-2026-80931 compress zstd: Panic on two-block frames CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences