Read the docs
TI-2026-78632 Aliases CVE-2026-111943

Go crypto/x509 accepts known compromised intermediate certificates

Priority LOW 32CWE-299Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 50 fixed, 32 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Go's crypto/x509 package before 1.26.10, and from 1.27.0-0 before 1.27.3, can accept known intermediate certificates that are no longer trustworthy, because system trust stores are not always updated. The flaw is an improper check for certificate revocation (CWE-299). A remote attacker with no privileges can exploit it with user interaction and high complexity to affect confidentiality and integrity.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00396 34th percentileScored 2026-11-07
Fix Partial crypto/x509 (Go standard library): 1.26.10, 1.27.3Red Hat: 181 advisoriesRed Hat: 50 fixed, 32 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarycrypto/x509before 1.26.10; 1.27.0-0 to before 1.27.31.26.10, 1.27.3Patch availableCNA
  • crypto/x509 VendorGo standard library Affected before 1.26.10; 1.27.0-0 to before 1.27.3 Fixed in 1.26.10, 1.27.3 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*——Go standard library

Remediation

Update Go to 1.26.10 or 1.27.3, the fixed versions for crypto/x509. Red Hat fixes it in RHSA-2026:95638 (go-toolset for RHEL 8) and RHSA-2026:95518 (for RHEL 9). Red Hat lists Red Hat Enterprise Linux 10, Red Hat Ceph Storage 7 and other products as affected with no fix available.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA crypto/x509 (Go standard library) Fixed in 1.26.10, 1.27.3

Red Hat 181 advisories

  • RHSA-2026:95638 Released 2026-11-05 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.26.1-2.module+el8.10.0+25288+9abe63b5.aarch64::go-toolset:rhel8, delve-1.26.1-2.module+el8.10.0+25288+9abe63b5.ppc64le::go-toolset:rhel8, delve-1.26.1-2.module+el8.10.0+25288+9abe63b5.src::go-toolset:rhel8 +22
  • RHSA-2026:95576 Released 2026-11-05 · Red Hat rating Important
    Release of containers for RHOSO 18.0.22
    • Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/barbican-rhel9-operator, registry.redhat.io/rhoso-operators/cinder-rhel9-operator, registry.redhat.io/rhoso-operators/designate-rhel9-operator +23
  • RHSA-2026:95518 Released 2026-11-05 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 9) delve-1.26.1-2.el9_8
Show 178 more Red Hat advisories
  • RHSA-2026:95519 Released 2026-11-05 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream (v. 10) delve-1.26.1-3.el10_2
  • RHSA-2026:95234 Released 2026-11-04 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.13.3-3.el8_4.6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) git-lfs-2.13.3-3.el8_4.6
  • RHSA-2026:95209 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 17.1 director Operator container images
    • Red Hat OpenStack Platform 17.1 registry.redhat.io/rhosp-rhel9/osp-director-agent, registry.redhat.io/rhosp-rhel9/osp-director-operator
  • RHSA-2026:95206 Released 2026-11-04 · Red Hat rating Important
    Updated Red Hat OpenStack Platform 16.2 director Operator container images
    • Red Hat OpenStack Platform 16.2 registry.redhat.io/rhosp-rhel8/osp-director-agent, registry.redhat.io/rhosp-rhel8/osp-director-operator
  • RHSA-2026:95014 Released 2026-11-04 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.158.0-2.el9_6
  • RHSA-2026:95015 Released 2026-11-04 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.158.0-2.el9_4
  • RHSA-2026:95016 Released 2026-11-04 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.158.0-2.el10_0
  • RHSA-2026:92286 Released 2026-11-03 · Red Hat rating Important
    OpenShift Container Platform 4.21.41 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-o-1.34.15-2.rhaos4.21.git0903fe5.el10, cri-o-1.34.15-9.rhaos4.21.git0903fe5.el9
  • RHSA-2026:94575 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9
  • RHSA-2026:94573 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-spire-server-rhel9
  • RHSA-2026:94572 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9
  • RHSA-2026:94571 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9
  • RHSA-2026:94570 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9
  • RHSA-2026:94569 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9
  • RHSA-2026:94562 Released 2026-11-03 · Red Hat rating Critical
    Red Hat OpenShift for Windows Containers 11.0 product release
    • Red Hat OpenShift for Windows Containers 11.0 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2026:94254 Released 2026-11-03 · Red Hat rating Important
    zero trust workload identity manager for Red Hat OpenShift 1.1.3
    • Zero Trust Workload Identity Manager 1.1 registry.redhat.io/zero-trust-workload-identity-manager/spiffe-helper-rhel9
  • RHSA-2026:93617 Released 2026-11-02 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 9) opentelemetry-collector-0.158.0-2.el9_8
  • RHSA-2026:93596 Released 2026-11-02 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream (v. 10) opentelemetry-collector-0.158.0-2.el10_2
  • RHSA-2026:92859 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.17 security update
    • Red Hat Satellite 6.17 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92861 Released 2026-10-29 · Red Hat rating Critical
    Satellite 6.19 security update
    • Red Hat Satellite 6.19 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, python3.12-brotli-1.2.1-1.el9pc +6
  • RHSA-2026:92858 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.16 EUS security update
    • Red Hat Satellite 6.16 for RHEL 8 openvox-agent-8.31.1-1.el8sat, openvox-server-8.17.0-1.el8sat, yggdrasil-worker-forwarder-0.1.1-1.el8sat
    • Red Hat Satellite 6.16 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:92860 Released 2026-10-29 · Red Hat rating Important
    Satellite 6.18 security update
    • Red Hat Satellite 6.18 for RHEL 9 openvox-agent-8.31.1-1.el9sat, openvox-server-8.17.0-1.el9sat, yggdrasil-worker-forwarder-0.1.1-1.el9sat
  • RHSA-2026:91719 Released 2026-10-29 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream (v. 9) ignition-2.26.0-1.el9_8.2, ignition-edge-2.26.0-1.el9_8.2, ignition-grub-2.26.0-1.el9_8.2 +1
  • RHSA-2026:92516 Released 2026-10-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.4.4
    • Red Hat OpenShift Service Mesh 3.4 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:92509 Released 2026-10-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.3.9
    • Red Hat OpenShift Service Mesh 3.3 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:92497 Released 2026-10-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.2.11
    • Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:91191 Released 2026-10-29 · Red Hat rating Important
    Red Hat build of MicroShift 4.19.53 security update
    • Red Hat OpenShift Container Platform 4.19 microshift-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9, microshift-ai-model-serving-release-info-4.19.53-202610271823.p0.gb3195dc.assembly.4.19.53.el9 +12
  • RHSA-2026:91172 Released 2026-10-29 · Red Hat rating Important
    Red Hat build of MicroShift 4.20.44 security update
    • Red Hat OpenShift Container Platform 4.20 microshift-4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9, microshift-ai-model-serving-4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9, microshift-ai-model-serving-release-info-4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9 +14
  • RHSA-2026:92480 Released 2026-10-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.1.14
    • Red Hat OpenShift Service Mesh 3.1 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:92451 Released 2026-10-29 · Red Hat rating Important
    Red Hat OpenShift Service Mesh 3.0.17
    • Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/istio-cni-rhel9, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9 +1
  • RHSA-2026:92372 Released 2026-10-29 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-10.el9_2, osbuild-composer-core-76.1-10.el9_2, osbuild-composer-dnf-json-76.1-10.el9_2 +1
  • RHSA-2026:92217 Released 2026-10-29 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) rhc-1:0.2.0-6.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rhc-1:0.2.0-6.el8_4.2
  • RHSA-2026:91958 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.7, osbuild-composer-core-101.3-4.el9_4.7, osbuild-composer-worker-101.3-4.el9_4.7
  • RHSA-2026:91720 Released 2026-10-28 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream (v. 10) ignition-2.26.0-3.el10_2.4, ignition-edge-2.26.0-3.el10_2.4, ignition-grub-2.26.0-3.el10_2.4 +1
  • RHSA-2026:91651 Released 2026-10-28 · Red Hat rating Critical
    Red Hat Developer Hub 1.9.10 release.
    • Red Hat Developer Hub 1.9 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:91646 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-13.el10_0, osbuild-composer-core-134.1-13.el10_0, osbuild-composer-worker-134.1-13.el10_0
  • RHSA-2026:91587 Released 2026-10-28 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-13.el9_6, osbuild-composer-core-132.2-13.el9_6, osbuild-composer-worker-132.2-13.el9_6
  • RHSA-2026:91632 Released 2026-10-28 · Red Hat rating Important
    Release of components for Service Telemetry Framework 1.5.7
    • Red Hat OpenStack 1.5 registry.redhat.io/stf/sg-core-rhel9
  • RHSA-2026:91572 Released 2026-10-28 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) yggdrasil-0.4.7-6.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) yggdrasil-devel-0.4.7-6.el10_0.1
  • RHSA-2026:91342 Released 2026-10-28 · Red Hat rating Important
    Red Hat Service Interconnect 2.2.4 Release (images)
    • Red Hat Service Interconnect 2 service-interconnect/service-controller-rhel9, service-interconnect/skupper-cli-rhel9, service-interconnect/skupper-controller-rhel9 +7
  • RHSA-2026:91329 Released 2026-10-27 · Red Hat rating Important
    Red Hat Service Interconnect 2.2.4 Release (rpms)
    • Red Hat Service Interconnect 2 skupper-cli-2.2.4-1.el9
    • Red Hat Service Interconnect 2 for RHEL 8 skupper-cli-2.2.4-1.el8
  • RHSA-2026:91138 Released 2026-10-27 · Red Hat rating Important
    yggdrasil security update
    • Red Hat Enterprise Linux AppStream (v. 10) yggdrasil-0.4.9.2-1.el10_2.4
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) yggdrasil-devel-0.4.9.2-1.el10_2.4
  • RHSA-2026:89196 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.22.20 packages and security update
    • Red Hat OpenShift Container Platform 4.22 cri-o-1.35.10-3.rhaos4.22.git9383502.el9, cri-tools-1.35.0-5.el9, openshift-4.22.0-202610241356.p2.gc023cae.assembly.stream.el8 +19
  • RHSA-2026:89713 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.16.74 packages and security update
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.13-16.rhaos4.16.git84cfdc6.el8, cri-o-1.29.13-16.rhaos4.16.git84cfdc6.el9, cri-tools-1.29.0-10.el8 +29
  • RHSA-2026:90994 Released 2026-10-27 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.4.0+25181+7ce5b91c.x86_64::go-toolset:rhel8, go-toolset-1.26.10-2.module+el8.4.0+25201+9a419e96.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:90271 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.12.102 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.12 openstack-ironic-1:21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-api-1:21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-common-1:21.0.1-0.20261012095526.c95b83b.el9 +3
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-38.rhaos4.12.git2e7f657.el8, cri-o-1.25.5-9.rhaos4.12.git6120b13.el9, cri-tools-1.25.0-8.el9 +18
  • RHSA-2026:89837 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.14.77 packages and security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.8-23.rhaos4.14.git0633bf1.el8, cri-o-1.27.8-23.rhaos4.14.git0633bf1.el9, cri-tools-1.27.0-10.el8 +13
  • RHSA-2026:90274 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.12.102 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:89839 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.14.77 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:89724 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.18.59 packages and security update
    • Red Hat OpenShift Container Platform 4.18 cri-o-1.31.13-18.rhaos4.18.gitfccfa27.el8, cri-o-1.31.13-18.rhaos4.18.gitfccfa27.el9, cri-tools-1.31.1-10.el8 +25
  • RHSA-2026:89715 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.16.74 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:89726 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.18.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-service-rhel9-operator +47
  • RHSA-2026:90757 Released 2026-10-27 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) git-lfs-3.6.1-2.el10_0.8
  • RHSA-2026:90726 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) rhc-1:0.2.2-1.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) rhc-1:0.2.2-1.el8_8.3
  • RHSA-2026:90725 Released 2026-10-27 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) rhc-1:0.2.1-14.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rhc-1:0.2.1-14.el8_6.1
  • RHSA-2026:89229 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.21.40 packages and security update
    • Red Hat OpenShift Container Platform 4.21 cri-tools-1.34.0-8.el9, openshift-4.21.0-202610221616.p2.g601ff80.assembly.stream.el10, openshift-4.21.0-202610221616.p2.g601ff80.assembly.stream.el8 +30
  • RHSA-2026:89198 Released 2026-10-27 · Red Hat rating Important
    OpenShift Container Platform 4.22.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:90518 Released 2026-10-27 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) ignition-2.17.0-2.el9_4.3, ignition-edge-2.17.0-2.el9_4.3, ignition-validate-2.17.0-2.el9_4.3
  • RHSA-2026:90519 Released 2026-10-27 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) ignition-2.15.0-2.el9_2.2, ignition-edge-2.15.0-2.el9_2.2, ignition-validate-2.15.0-2.el9_2.2
  • RHSA-2026:89341 Released 2026-10-26 · Red Hat rating Important
    OpenShift Container Platform 4.20.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:90514 Released 2026-10-26 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) ignition-2.21.0-7.el9_6.2, ignition-edge-2.21.0-7.el9_6.2, ignition-grub-2.21.0-7.el9_6.2 +1
  • RHSA-2026:89655 Released 2026-10-26 · Red Hat rating Important
    OpenShift Container Platform 4.19.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:89626 Released 2026-10-26 · Red Hat rating Important
    OpenShift Container Platform 4.21.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:90513 Released 2026-10-26 · Red Hat rating Important
    ignition security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) ignition-2.21.0-3.el10_0.5, ignition-edge-2.21.0-3.el10_0.5, ignition-validate-2.21.0-3.el10_0.5
  • RHSA-2026:90493 Released 2026-10-26 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-11.el8_6, osbuild-composer-core-46.3-11.el8_6, osbuild-composer-dnf-json-46.3-11.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-11.el8_6, osbuild-composer-core-46.3-11.el8_6, osbuild-composer-dnf-json-46.3-11.el8_6 +1
  • RHSA-2026:90462 Released 2026-10-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.22.2-9.el9_8, skopeo-tests-2:1.22.2-9.el9_8
  • RHSA-2026:90424 Released 2026-10-26 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-2:1.43.4-2.el9_8, buildah-tests-2:1.43.4-2.el9_8
  • RHSA-2026:90362 Released 2026-10-26 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-8.el9_8, podman-docker-6:5.8.2-8.el9_8, podman-plugins-6:5.8.2-8.el9_8 +2
  • RHSA-2026:89817 Released 2026-10-26 · Red Hat rating Important
    Red Hat build of MicroShift 4.22.20 security update
    • Red Hat OpenShift Container Platform 4.22 microshift-4.22.20-202610260627.p0.g9879ed9.assembly.4.22.20.el9, microshift-ai-model-serving-4.22.20-202610260627.p0.g9879ed9.assembly.4.22.20.el9, microshift-ai-model-serving-release-info-4.22.20-202610260627.p0.g9879ed9.assembly.4.22.20.el9 +16
  • RHSA-2026:89818 Released 2026-10-26 · Red Hat rating Important
    Red Hat build of MicroShift 4.21.40 security update
    • Red Hat OpenShift Container Platform 4.21 microshift-4.21.40-202610260627.p0.g728ad5e.assembly.4.21.40.el9, microshift-ai-model-serving-4.21.40-202610260627.p0.g728ad5e.assembly.4.21.40.el9, microshift-ai-model-serving-release-info-4.21.40-202610260627.p0.g728ad5e.assembly.4.21.40.el9 +16
  • RHSA-2026:90363 Released 2026-10-26 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-12.el8_8, osbuild-composer-core-75-12.el8_8, osbuild-composer-dnf-json-75-12.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-12.el8_8, osbuild-composer-core-75-12.el8_8, osbuild-composer-dnf-json-75-12.el8_8 +1
  • RHSA-2026:89933 Released 2026-10-26 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) delve-1.26.1-1.el9_6.2
  • RHSA-2026:90330 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 security advisory
    • Red Hat OpenStack Platform 16.2 collectd-libpod-stats-1.0.4-6.2.el8ost, collectd-sensubility-0.2.1-1.3.el8ost, etcd-3.3.23-25.el8ost
  • RHSA-2026:90332 Released 2026-10-26 · Red Hat rating Important
    RHOSO 18.0 os-diff security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20261021172337.a95ae05.el9ost
  • RHSA-2026:90329 Released 2026-10-26 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 security advisory
    • Red Hat OpenStack Platform 17.1 collectd-libpod-stats-1.0.6-9.el9ost, collectd-sensubility-0.2.1-8.el9ost, etcd-3.4.26-9.10.el9ost
  • RHSA-2026:89920 Released 2026-10-26 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) git-lfs-3.6.1-2.el9_6.8
  • RHSA-2026:89914 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.8
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.8
  • RHSA-2026:89921 Released 2026-10-26 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) git-lfs-3.4.1-4.el9_4.7
  • RHSA-2026:89922 Released 2026-10-26 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) git-lfs-3.2.0-2.el9_2.11
  • RHSA-2026:89925 Released 2026-10-26 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) git-lfs-3.2.0-2.el8_8.9
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) git-lfs-3.2.0-2.el8_8.9
  • RHSA-2026:89926 Released 2026-10-26 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.9
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) git-lfs-2.13.3-3.el8_6.9
  • RHSA-2026:89915 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) rhc-1:0.2.2-1.el9_2.7
  • RHSA-2026:89908 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) rhc-1:0.2.4-9.el9_4.3
  • RHSA-2026:89888 Released 2026-10-26 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) delve-1.26.1-1.el9_2.2
  • RHSA-2026:89885 Released 2026-10-26 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) delve-1.26.1-1.el9_4.2
  • RHSA-2026:89892 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) rhc-1:0.3.2-6.el10_0.2
  • RHSA-2026:89884 Released 2026-10-26 · Red Hat rating Important
    delve security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) delve-1.26.1-3.el10_0
  • RHSA-2026:89832 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 10) rhc-1:0.3.8-8.el10_2
  • RHSA-2026:89760 Released 2026-10-26 · Red Hat rating Important
    container-tools:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.s390x::container-tools:rhel8 +47
  • RHSA-2026:89761 Released 2026-10-26 · Red Hat rating Important
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 10) skopeo-2:1.22.2-6.el10_2, skopeo-tests-2:1.22.2-6.el10_2
  • RHSA-2026:89751 Released 2026-10-26 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-10.2.6-28.el10_2.8, grafana-selinux-10.2.6-28.el10_2.8
  • RHSA-2026:89740 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 9) rhc-1:0.2.7-16.el9_8
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) rhc-devel-1:0.2.7-16.el9_8
  • RHSA-2026:89744 Released 2026-10-26 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-23.el9_8.7, grafana-selinux-10.2.6-23.el9_8.7
  • RHSA-2026:89752 Released 2026-10-26 · Red Hat rating Important
    oci-seccomp-bpf-hook security update
    • Red Hat Enterprise Linux AppStream (v. 10) oci-seccomp-bpf-hook-1.2.11-3.el10_2
  • RHSA-2026:89741 Released 2026-10-26 · Red Hat rating Important
    rhc security update
    • Red Hat Enterprise Linux AppStream (v. 8) rhc-1:0.2.5-13.el8_10
  • RHSA-2026:89131 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +6
  • RHSA-2026:89081 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.8.3
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:89041 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +7
  • RHSA-2026:89031 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.3
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +7
  • RHSA-2026:88396 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-24.el9_6, grafana-selinux-10.2.6-24.el9_6
  • RHSA-2026:88395 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-pcp-3.2.0-6.el8_8.2
  • RHSA-2026:88397 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-27.el10_0, grafana-selinux-10.2.6-27.el10_0
  • RHSA-2026:88394 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-pcp-3.2.0-4.el8_6.2
  • RHSA-2026:88354 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-pcp-5.1.1-17.el9_8.2
  • RHSA-2026:88340 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) grafana-7.5.15-12.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) grafana-7.5.15-12.el8_8
  • RHSA-2026:88336 Released 2026-10-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-11.el10_2, podman-docker-7:5.8.2-11.el10_2, podman-remote-7:5.8.2-11.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-11.el10_2
  • RHSA-2026:88339 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) grafana-7.5.11-12.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) grafana-7.5.11-12.el8_6
  • RHSA-2026:88332 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-9.2.10-29.el9_4, grafana-selinux-9.2.10-29.el9_4
  • RHSA-2026:88316 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 10) grafana-pcp-5.3.0-8.el10_2.2
  • RHSA-2026:88317 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-pcp-5.3.0-1.el10_0.2
  • RHSA-2026:88280 Released 2026-10-22 · Red Hat rating Important
    golang-github-openprinting-ipp-usb security update
    • Red Hat Enterprise Linux AppStream (v. 10) ipp-usb-0.9.27-7.el10_2.4
  • RHSA-2026:88262 Released 2026-10-22 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 10) buildah-2:1.43.1-7.el10_2, buildah-tests-2:1.43.1-7.el10_2
  • RHSA-2026:88189 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-pcp-5.1.1-19.el8_10
  • RHSA-2026:88188 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-36.el8_10, grafana-selinux-9.2.10-36.el8_10
  • RHSA-2026:88187 Released 2026-10-22 · Red Hat rating Important
    Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release
    • Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9, registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9 +3
  • RHSA-2026:87911 Released 2026-10-22 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-pcp-5.1.1-15.el9_6.2
  • RHSA-2026:87732 Released 2026-10-22 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-9.0.9-14.el9_2
  • RHSA-2026:87245 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8 +13
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) delve-1.26.1-1.module+el8.8.0+24781+86ad105d.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.8.0+24781+86ad105d.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.8.0+25113+a148ecc0.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87246 Released 2026-10-21 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) delve-1.26.1-1.module+el8.6.0+24782+a062e766.src::go-toolset:rhel8, delve-1.26.1-1.module+el8.6.0+24782+a062e766.x86_64::go-toolset:rhel8, go-toolset-1.26.10-4.module+el8.6.0+25114+90ecdb41.x86_64::go-toolset:rhel8 +8
  • RHSA-2026:87153 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.15-1.15.5-0.2.hum1@aarch64, spire1.15-1.15.5-0.2.hum1@s390x, spire1.15-1.15.5-0.2.hum1@src +10
  • RHSA-2026:87092 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentofu1.12-1.12.8-0.2.hum1@aarch64, opentofu1.12-1.12.8-0.2.hum1@s390x, opentofu1.12-1.12.8-0.2.hum1@src +1
  • RHSA-2026:87076 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images prometheus3.5-3.5.5-0.9.hum1@aarch64, prometheus3.5-3.5.5-0.9.hum1@src, prometheus3.5-3.5.5-0.9.hum1@x86_64
  • RHSA-2026:87075 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana12.4-12.4.13-0.2.hum1@aarch64, grafana12.4-12.4.13-0.2.hum1@src, grafana12.4-12.4.13-0.2.hum1@x86_64
  • RHSA-2026:87043 Released 2026-10-21 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) go-toolset-1.26.10-1.el9_6, golang-1.26.10-1.el9_6, golang-bin-1.26.10-1.el9_6 +5
  • RHSA-2026:87065 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images distribution-3.1.2-0.3.hum1@aarch64, distribution-3.1.2-0.3.hum1@s390x, distribution-3.1.2-0.3.hum1@src +1
  • RHSA-2026:87042 Released 2026-10-21 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) go-toolset-1.26.10-1.el9_4, golang-1.26.10-1.el9_4, golang-bin-1.26.10-1.el9_4 +5
  • RHSA-2026:87041 Released 2026-10-21 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) go-toolset-1.26.10-1.el9_2, golang-1.26.10-1.el9_2, golang-bin-1.26.10-1.el9_2 +5
  • RHSA-2026:87040 Released 2026-10-21 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) go-toolset-1.26.10-1.el10_0, golang-1.26.10-1.el10_0, golang-bin-1.26.10-1.el10_0 +5
  • RHSA-2026:87053 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.7-3.7.8-0.4.hum1@aarch64, loki3.7-3.7.8-0.4.hum1@src, loki3.7-3.7.8-0.4.hum1@x86_64 +4
  • RHSA-2026:87029 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images prometheus3.13-3.13.4-0.2.hum1@aarch64, prometheus3.13-3.13.4-0.2.hum1@src, prometheus3.13-3.13.4-0.2.hum1@x86_64
  • RHSA-2026:87028 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images hugo-0.168.0-0.2.hum1@aarch64, hugo-0.168.0-0.2.hum1@s390x, hugo-0.168.0-0.2.hum1@src +1
  • RHSA-2026:87024 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images tempo3.0-3.0.4-0.2.hum1@aarch64, tempo3.0-3.0.4-0.2.hum1@src, tempo3.0-3.0.4-0.2.hum1@x86_64
  • RHSA-2026:86972 Released 2026-10-21 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) grafana-pcp-5.1.1-10.el9_4
  • RHSA-2026:87008 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.14-1.14.8-0.2.hum1@aarch64, spire1.14-1.14.8-0.2.hum1@s390x, spire1.14-1.14.8-0.2.hum1@src +10
  • RHSA-2026:86973 Released 2026-10-21 · Red Hat rating Important
    grafana-pcp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) grafana-pcp-5.1.1-5.el9_2.3
  • RHSA-2026:86990 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images cosign-3.1.3-0.4.hum1@aarch64, cosign-3.1.3-0.4.hum1@s390x, cosign-3.1.3-0.4.hum1@src +1
  • RHSA-2026:86992 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images git-sync-4.7.1-0.3.hum1@aarch64, git-sync-4.7.1-0.3.hum1@s390x, git-sync-4.7.1-0.3.hum1@src +1
  • RHSA-2026:86987 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images spire1.15-1.15.4-0.2.hum1@aarch64, spire1.15-1.15.4-0.2.hum1@s390x, spire1.15-1.15.4-0.2.hum1@src +10
  • RHSA-2026:86978 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images syft-1.55.0-0.2.hum1@aarch64, syft-1.55.0-0.2.hum1@s390x, syft-1.55.0-0.2.hum1@src +1
  • RHSA-2026:86977 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images rekor-1.5.4-0.3.hum1@src, rekor-server-1.5.4-0.3.hum1@aarch64, rekor-server-1.5.4-0.3.hum1@s390x +1
  • RHSA-2026:86960 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images helm4-4.3.1-0.2.hum1@aarch64, helm4-4.3.1-0.2.hum1@s390x, helm4-4.3.1-0.2.hum1@src +1
  • RHSA-2026:86956 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images skopeo-1.24.1-1.2.hum1@aarch64, skopeo-1.24.1-1.2.hum1@s390x, skopeo-1.24.1-1.2.hum1@src +4
  • RHSA-2026:86958 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images k6v1-1.8.2-0.2.hum1@aarch64, k6v1-1.8.2-0.2.hum1@src, k6v1-1.8.2-0.2.hum1@x86_64
  • RHSA-2026:86949 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentofu1.10-1.10.10-0.6.hum1@aarch64, opentofu1.10-1.10.10-0.6.hum1@s390x, opentofu1.10-1.10.10-0.6.hum1@src +1
  • RHSA-2026:86952 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images oauth2-proxy-7.15.5-0.3.hum1@aarch64, oauth2-proxy-7.15.5-0.3.hum1@s390x, oauth2-proxy-7.15.5-0.3.hum1@src +1
  • RHSA-2026:86948 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images go-fdo-server-1.0.2-1.2.hum1@aarch64, go-fdo-server-1.0.2-1.2.hum1@s390x, go-fdo-server-1.0.2-1.2.hum1@src +10
  • RHSA-2026:86946 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images helm3-3.22.1-0.2.hum1@aarch64, helm3-3.22.1-0.2.hum1@s390x, helm3-3.22.1-0.2.hum1@src +1
  • RHSA-2026:86944 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images podman-6.1.4-1.1.hum1@aarch64, podman-6.1.4-1.1.hum1@s390x, podman-6.1.4-1.1.hum1@src +12
  • RHSA-2026:86943 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grype-0.121.0-0.2.hum1@aarch64, grype-0.121.0-0.2.hum1@s390x, grype-0.121.0-0.2.hum1@src +1
  • RHSA-2026:86939 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images jaeger-2.21.0-0.2.hum1@aarch64, jaeger-2.21.0-0.2.hum1@src, jaeger-2.21.0-0.2.hum1@x86_64
  • RHSA-2026:86938 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images fulcio-1.9.0-0.3.hum1@aarch64, fulcio-1.9.0-0.3.hum1@s390x, fulcio-1.9.0-0.3.hum1@src +1
  • RHSA-2026:86936 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images git-lfs-3.8.0-0.4.hum1@aarch64, git-lfs-3.8.0-0.4.hum1@s390x, git-lfs-3.8.0-0.4.hum1@src +1
  • RHSA-2026:86934 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentelemetry-collector-0.163.1-0.2.hum1@aarch64, opentelemetry-collector-0.163.1-0.2.hum1@s390x, opentelemetry-collector-0.163.1-0.2.hum1@src +1
  • RHSA-2026:86932 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentelemetry-collector-contrib-0.162.0-0.4.hum1@aarch64, opentelemetry-collector-contrib-0.162.0-0.4.hum1@s390x, opentelemetry-collector-contrib-0.162.0-0.4.hum1@src +1
  • RHSA-2026:86928 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.2-13.2.4-0.2.hum1@aarch64, grafana13.2-13.2.4-0.2.hum1@s390x, grafana13.2-13.2.4-0.2.hum1@src +1
  • RHSA-2026:86927 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images dex-2.46.0-0.3.hum1@aarch64, dex-2.46.0-0.3.hum1@s390x, dex-2.46.0-0.3.hum1@src +1
  • RHSA-2026:86930 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images grafana13.1-13.1.7-0.3.hum1@aarch64, grafana13.1-13.1.7-0.3.hum1@s390x, grafana13.1-13.1.7-0.3.hum1@src +1
  • RHSA-2026:86929 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images nats-server2.12-2.12.15-0.3.hum1@aarch64, nats-server2.12-2.12.15-0.3.hum1@s390x, nats-server2.12-2.12.15-0.3.hum1@src +1
  • RHSA-2026:86922 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images caddy-2.11.7-0.3.hum1@aarch64, caddy-2.11.7-0.3.hum1@s390x, caddy-2.11.7-0.3.hum1@src +1
  • RHSA-2026:86918 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images tempo2.10-2.10.8-0.6.hum1@aarch64, tempo2.10-2.10.8-0.6.hum1@src, tempo2.10-2.10.8-0.6.hum1@x86_64
  • RHSA-2026:86914 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images trivy-0.76.0-0.2.hum1@aarch64, trivy-0.76.0-0.2.hum1@s390x, trivy-0.76.0-0.2.hum1@src +1
  • RHSA-2026:86908 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images go-fdo-client-1.0.0-2.3.hum1@aarch64, go-fdo-client-1.0.0-2.3.hum1@s390x, go-fdo-client-1.0.0-2.3.hum1@src +1
  • RHSA-2026:86893 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images xcaddy-0.4.7-0.3.hum1@aarch64, xcaddy-0.4.7-0.3.hum1@s390x, xcaddy-0.4.7-0.3.hum1@src +1
  • RHSA-2026:86906 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images kubernetes1.35-1.35.9-0.3.hum1@aarch64, kubernetes1.35-1.35.9-0.3.hum1@s390x, kubernetes1.35-1.35.9-0.3.hum1@src +10
  • RHSA-2026:86886 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images kubernetes1.36-1.36.5-1.2.hum1@aarch64, kubernetes1.36-1.36.5-1.2.hum1@src, kubernetes1.36-1.36.5-1.2.hum1@x86_64 +6
  • RHSA-2026:86867 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images nats-server2.14-2.14.8-0.2.hum1@aarch64, nats-server2.14-2.14.8-0.2.hum1@s390x, nats-server2.14-2.14.8-0.2.hum1@src +1
  • RHSA-2026:86863 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images oras-1.3.5-0.2.hum1@aarch64, oras-1.3.5-0.2.hum1@s390x, oras-1.3.5-0.2.hum1@src +1
  • RHSA-2026:86858 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images buildah-1.45.2-1.1.hum1@aarch64, buildah-1.45.2-1.1.hum1@s390x, buildah-1.45.2-1.1.hum1@src +1
  • RHSA-2026:86839 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images opentelemetry-collector-k8s-0.163.1-0.2.hum1@aarch64, opentelemetry-collector-k8s-0.163.1-0.2.hum1@s390x, opentelemetry-collector-k8s-0.163.1-0.2.hum1@src +1
  • RHSA-2026:86812 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images loki3.6-3.6.18-0.2.hum1@aarch64, loki3.6-3.6.18-0.2.hum1@src, loki3.6-3.6.18-0.2.hum1@x86_64 +4
  • RHSA-2026:86776 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images etcd-3.7.2-0.3.hum1@aarch64, etcd-3.7.2-0.3.hum1@s390x, etcd-3.7.2-0.3.hum1@src +1
  • RHSA-2026:86738 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images k6v2-2.3.0-0.3.hum1@aarch64, k6v2-2.3.0-0.3.hum1@src, k6v2-2.3.0-0.3.hum1@x86_64
  • RHSA-2026:86733 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images kube-state-metrics-2.20.0-0.4.hum1@aarch64, kube-state-metrics-2.20.0-0.4.hum1@s390x, kube-state-metrics-2.20.0-0.4.hum1@src +1
  • RHSA-2026:86196 Released 2026-10-20 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.26.10-1.el9_8, golang-1.26.10-1.el9_8, golang-bin-1.26.10-1.el9_8 +5
  • RHSA-2026:86203 Released 2026-10-20 · Red Hat rating Important
    go-toolset:rhel8 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.26.1-1.module+el8.10.0+24516+40554724.aarch64::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.ppc64le::go-toolset:rhel8, delve-1.26.1-1.module+el8.10.0+24516+40554724.src::go-toolset:rhel8 +22
  • RHSA-2026:86093 Released 2026-10-20 · Red Hat rating Important
    golang security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) go-toolset-1.26.10-1.el10_2, golang-1.26.10-1.el10_2, golang-bin-1.26.10-1.el10_2 +5
  • RHSA-2026:86029 Released 2026-10-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.27-1.27.3-1.hum1@aarch64, golang1.27-1.27.3-1.hum1@s390x, golang1.27-1.27.3-1.hum1@src +16
  • RHSA-2026:85899 Released 2026-10-20 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.10-0.1.hum1@aarch64, golang1.26-1.26.10-0.1.hum1@s390x, golang1.26-1.26.10-0.1.hum1@src +16

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Ansible Automation Orchestrator 2026AffectedNo fix yet
Exploit IntelligenceAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Service Mesh 3AffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Ceph Storage 7AffectedNo fix yet
Red Hat Ceph Storage 8AffectedNo fix yet
Red Hat Ceph Storage 9AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Developer Hub 2AffectedNo fix yet
Red Hat Edge Manager 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift for Windows ContainersAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Service Interconnect 1AffectedNo fix yet
Self-service automation portal 2AffectedNo fix yet
streams for Apache Kafka 3AffectedNo fix yet
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:90332
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:89914
Red Hat Developer Hub 1.9Fixed RHSA-2026:91651
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:86093, RHSA-2026:88262, RHSA-2026:88280, RHSA-2026:88316, RHSA-2026:88336, RHSA-2026:89751, RHSA-2026:89752, RHSA-2026:89761, RHSA-2026:89832, RHSA-2026:91138, RHSA-2026:91720, RHSA-2026:93596, RHSA-2026:95519
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:86203, RHSA-2026:88188, RHSA-2026:88189, RHSA-2026:89741, RHSA-2026:89760, RHSA-2026:95638
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:86196, RHSA-2026:88354, RHSA-2026:89740, RHSA-2026:89744, RHSA-2026:90362, RHSA-2026:90424, RHSA-2026:90462, RHSA-2026:91719, RHSA-2026:93617, RHSA-2026:95518
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:89926, RHSA-2026:90493, RHSA-2026:90725
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:89925, RHSA-2026:90363, RHSA-2026:90726
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:86973, RHSA-2026:87041, RHSA-2026:87732, RHSA-2026:89888, RHSA-2026:89915, RHSA-2026:89922, RHSA-2026:90519, RHSA-2026:92372
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:86972, RHSA-2026:87042, RHSA-2026:88332, RHSA-2026:89885, RHSA-2026:89908, RHSA-2026:89921, RHSA-2026:90518, RHSA-2026:91958, RHSA-2026:95015
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:87040, RHSA-2026:88317, RHSA-2026:88397, RHSA-2026:89884, RHSA-2026:89892, RHSA-2026:90513, RHSA-2026:90757, RHSA-2026:91572, RHSA-2026:91646, RHSA-2026:95016
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:87043, RHSA-2026:87911, RHSA-2026:88396, RHSA-2026:89914, RHSA-2026:89920, RHSA-2026:89933, RHSA-2026:90514, RHSA-2026:91587, RHSA-2026:95014
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:90994, RHSA-2026:92217, RHSA-2026:95234
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:87246, RHSA-2026:88339, RHSA-2026:88394, RHSA-2026:89926, RHSA-2026:90493, RHSA-2026:90725
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:87245, RHSA-2026:88340, RHSA-2026:88395, RHSA-2026:89925, RHSA-2026:90363, RHSA-2026:90726
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:88336, RHSA-2026:91138
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:89740
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:91572
Red Hat Hardened ImagesFixed RHSA-2026:85899, RHSA-2026:86029, RHSA-2026:86733, RHSA-2026:86738, RHSA-2026:86776, RHSA-2026:86812, RHSA-2026:86839, RHSA-2026:86858, RHSA-2026:86863, RHSA-2026:86867, RHSA-2026:86886, RHSA-2026:86893, RHSA-2026:86906, RHSA-2026:86908, RHSA-2026:86914, RHSA-2026:86918, RHSA-2026:86922, RHSA-2026:86927, RHSA-2026:86928, RHSA-2026:86929, RHSA-2026:86930, RHSA-2026:86932, RHSA-2026:86934, RHSA-2026:86936, RHSA-2026:86938, RHSA-2026:86939, RHSA-2026:86943, RHSA-2026:86944, RHSA-2026:86946, RHSA-2026:86948, RHSA-2026:86949, RHSA-2026:86952, RHSA-2026:86956, RHSA-2026:86958, RHSA-2026:86960, RHSA-2026:86977, RHSA-2026:86978, RHSA-2026:86987, RHSA-2026:86990, RHSA-2026:86992, RHSA-2026:87008, RHSA-2026:87024, RHSA-2026:87028, RHSA-2026:87029, RHSA-2026:87053, RHSA-2026:87065, RHSA-2026:87075, RHSA-2026:87076, RHSA-2026:87092, RHSA-2026:87153
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:89031, RHSA-2026:89081
Red Hat OpenShift Builds 1.9.2Fixed RHSA-2026:89041, RHSA-2026:89131
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:90271, RHSA-2026:90274
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:89837, RHSA-2026:89839
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:89713, RHSA-2026:89715
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:89724, RHSA-2026:89726
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:89655, RHSA-2026:91191
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:89341, RHSA-2026:91172
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:89229, RHSA-2026:89626, RHSA-2026:89818, RHSA-2026:92286
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:89196, RHSA-2026:89198, RHSA-2026:89817
Red Hat OpenShift Service Mesh 3.0Fixed RHSA-2026:92451
Red Hat OpenShift Service Mesh 3.1Fixed RHSA-2026:92480
Red Hat OpenShift Service Mesh 3.2Fixed RHSA-2026:92497
Red Hat OpenShift Service Mesh 3.3Fixed RHSA-2026:92509
Red Hat OpenShift Service Mesh 3.4Fixed RHSA-2026:92516
Red Hat OpenShift distributed tracing 3.11Fixed RHSA-2026:88187
Red Hat OpenShift for Windows Containers 11.0Fixed RHSA-2026:94562
Red Hat OpenStack 1.5Fixed RHSA-2026:91632
Red Hat OpenStack Platform 16.2Fixed RHSA-2026:90330, RHSA-2026:95206
Red Hat OpenStack Platform 17.1Fixed RHSA-2026:90329, RHSA-2026:95209
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:90332, RHSA-2026:95576
Red Hat Satellite 6.16 for RHEL 8Fixed RHSA-2026:92858
Red Hat Satellite 6.16 for RHEL 9Fixed RHSA-2026:92858
Red Hat Satellite 6.17 for RHEL 9Fixed RHSA-2026:92859
Red Hat Satellite 6.18 for RHEL 9Fixed RHSA-2026:92860
Red Hat Satellite 6.19 for RHEL 9Fixed RHSA-2026:92861
Red Hat Service Interconnect 2Fixed RHSA-2026:91329, RHSA-2026:91342
Red Hat Service Interconnect 2 for RHEL 8Fixed RHSA-2026:91329
Zero Trust Workload Identity Manager 1.0Fixed—
Zero Trust Workload Identity Manager 1.1Fixed RHSA-2026:94254, RHSA-2026:94569, RHSA-2026:94570, RHSA-2026:94571, RHSA-2026:94572, RHSA-2026:94573, RHSA-2026:94575
Not affected: 41 products
  • Ironic content for Red Hat OpenShift Container Platform 4.12
  • Red Hat Ansible Automation Platform 2
  • Red Hat Developer Hub 1.9
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Hardened Images
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Builds 1.9.2
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Service Mesh 3.0
  • Red Hat OpenShift Service Mesh 3.1
  • Red Hat OpenShift Service Mesh 3.2
  • Red Hat OpenShift Service Mesh 3.3
  • Red Hat OpenShift Service Mesh 3.4
  • Red Hat OpenShift distributed tracing 3.11
  • Red Hat OpenShift for Windows Containers 11.0
  • Red Hat OpenStack 1.5
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat OpenStack Services on OpenShift 18.0
  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • Red Hat Satellite 6.17 for RHEL 9
  • Red Hat Satellite 6.18 for RHEL 9
  • Red Hat Satellite 6.19 for RHEL 9
  • Service Telemetry Framework 1.5
  • streams for Apache Kafka 2

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-111943
  2. 2026-10-21 Fix available: RHSA-2026:85899 · Red Hat
  3. 2026-10-21 Fix available: RHSA-2026:86029 · Red Hat
  4. 2026-10-21 Fix available: RHSA-2026:86203 · Red Hat
  5. 2026-10-21 Fix available: RHSA-2026:86196 · Red Hat
  6. 2026-10-21 Fix available: RHSA-2026:86093 · Red Hat
  7. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux AppStream (v. 9) +1 · Red Hat
  8. 2026-10-21 CVSS score added · Red Hat
  9. 2026-10-21 Fix available: RHSA-2026:87041 · Red Hat
  10. 2026-10-21 Fix available: RHSA-2026:87040 · Red Hat
  11. 2026-10-21 Fix available: RHSA-2026:87042 · Red Hat
  12. 2026-10-21 Fix available: RHSA-2026:87043 · Red Hat
  13. 2026-10-21 Fix available: RHSA-2026:86973 · Red Hat
  14. 2026-10-21 Fix available: RHSA-2026:86972 · Red Hat
  15. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v. 10.0) +1 · Red Hat
  16. 2026-10-22 Fix available: RHSA-2026:86733 · Red Hat
  17. 2026-10-22 Fix available: RHSA-2026:86738 · Red Hat
  18. 2026-10-22 Fix available: RHSA-2026:86776 · Red Hat
  19. 2026-10-22 Fix available: RHSA-2026:86812 · Red Hat
  20. 2026-10-22 Fix available: RHSA-2026:86839 · Red Hat
  21. 2026-10-22 Fix available: RHSA-2026:86858 · Red Hat
  22. 2026-10-22 Fix available: RHSA-2026:86863 · Red Hat
  23. 2026-10-22 Fix available: RHSA-2026:86886 · Red Hat
  24. 2026-10-22 Fix available: RHSA-2026:86867 · Red Hat
  25. 2026-10-22 Fix available: RHSA-2026:86893 · Red Hat
  26. 2026-10-22 Fix available: RHSA-2026:86906 · Red Hat
  27. 2026-10-22 Fix available: RHSA-2026:86914 · Red Hat
  28. 2026-10-22 Fix available: RHSA-2026:86908 · Red Hat
  29. 2026-10-22 Fix available: RHSA-2026:86918 · Red Hat
  30. 2026-10-22 Fix available: RHSA-2026:86922 · Red Hat
  31. 2026-10-22 Fix available: RHSA-2026:86927 · Red Hat
  32. 2026-10-22 Fix available: RHSA-2026:86929 · Red Hat
  33. 2026-10-22 Fix available: RHSA-2026:86928 · Red Hat
  34. 2026-10-22 Fix available: RHSA-2026:86930 · Red Hat
  35. 2026-10-22 Fix available: RHSA-2026:86932 · Red Hat
  36. 2026-10-22 Fix available: RHSA-2026:86934 · Red Hat
  37. 2026-10-22 Fix available: RHSA-2026:86936 · Red Hat
  38. 2026-10-22 Fix available: RHSA-2026:86938 · Red Hat
  39. 2026-10-22 Fix available: RHSA-2026:86939 · Red Hat
  40. 2026-10-22 Fix available: RHSA-2026:86943 · Red Hat
  41. 2026-10-22 Fix available: RHSA-2026:86944 · Red Hat
  42. 2026-10-22 Fix available: RHSA-2026:86948 · Red Hat
  43. 2026-10-22 Fix available: RHSA-2026:86946 · Red Hat
  44. 2026-10-22 Fix available: RHSA-2026:86949 · Red Hat
  45. 2026-10-22 Fix available: RHSA-2026:86952 · Red Hat
  46. 2026-10-22 Fix available: RHSA-2026:86956 · Red Hat
  47. 2026-10-22 Fix available: RHSA-2026:86960 · Red Hat
  48. 2026-10-22 Fix available: RHSA-2026:86958 · Red Hat
  49. 2026-10-22 Fix available: RHSA-2026:86977 · Red Hat
  50. 2026-10-22 Fix available: RHSA-2026:86978 · Red Hat
  51. 2026-10-22 Fix available: RHSA-2026:86987 · Red Hat
  52. 2026-10-22 Fix available: RHSA-2026:86990 · Red Hat
  53. 2026-10-22 Fix available: RHSA-2026:87008 · Red Hat
  54. 2026-10-22 Fix available: RHSA-2026:86992 · Red Hat
  55. 2026-10-22 Fix available: RHSA-2026:87024 · Red Hat
  56. 2026-10-22 Fix available: RHSA-2026:87029 · Red Hat
  57. 2026-10-22 Fix available: RHSA-2026:87028 · Red Hat
  58. 2026-10-22 Fix available: RHSA-2026:87065 · Red Hat
  59. 2026-10-22 Fix available: RHSA-2026:87053 · Red Hat
  60. 2026-10-22 Fix available: RHSA-2026:87075 · Red Hat
  61. 2026-10-22 Fix available: RHSA-2026:87076 · Red Hat
  62. 2026-10-22 Fix available: RHSA-2026:87092 · Red Hat
  63. 2026-10-22 Fix available: RHSA-2026:87153 · Red Hat
  64. 2026-10-22 Fix available: RHSA-2026:87911 · Red Hat
  65. 2026-10-22 Fix available: RHSA-2026:87245 · Red Hat
  66. 2026-10-22 Fix available: RHSA-2026:87246 · Red Hat
  67. 2026-10-23 Fix available: RHSA-2026:88340 · Red Hat
  68. 2026-10-23 Fix available: RHSA-2026:88339 · Red Hat
  69. 2026-10-23 Fix available: RHSA-2026:88394 · Red Hat
  70. 2026-10-23 Fix available: RHSA-2026:88395 · Red Hat
  71. 2026-10-23 Fix available: RHSA-2026:88187 · Red Hat
  72. 2026-10-23 Fix available: RHSA-2026:88189 · Red Hat
  73. 2026-10-23 Fix available: RHSA-2026:87732 · Red Hat
  74. 2026-10-23 Fix available: RHSA-2026:88188 · Red Hat
  75. 2026-10-23 Fix available: RHSA-2026:88262 · Red Hat
  76. 2026-10-23 Fix available: RHSA-2026:88280 · Red Hat
  77. 2026-10-23 Fix available: RHSA-2026:88316 · Red Hat
  78. 2026-10-23 Fix available: RHSA-2026:88317 · Red Hat
  79. 2026-10-23 Fix available: RHSA-2026:88336 · Red Hat
  80. 2026-10-23 Fix available: RHSA-2026:88396 · Red Hat
  81. 2026-10-23 Fix available: RHSA-2026:88397 · Red Hat
  82. 2026-10-23 Fix available: RHSA-2026:88354 · Red Hat
  83. 2026-10-23 Fix available: RHSA-2026:88332 · Red Hat
  84. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) +3 · Red Hat
  85. 2026-10-24 Affected versions changed · Red Hat
  86. 2026-10-25 Fix available: RHSA-2026:89081 · Red Hat
  87. 2026-10-25 Fix available: RHSA-2026:89031 · Red Hat
  88. 2026-10-25 Fix available: RHSA-2026:89131 · Red Hat
  89. 2026-10-25 Fix available: RHSA-2026:89041 · Red Hat
  90. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3, Red Hat OpenShift Builds 1.9.2 · Red Hat
  91. 2026-10-26 Fix available: RHSA-2026:89741 · Red Hat
  92. 2026-10-26 Fix available: RHSA-2026:89760 · Red Hat
  93. 2026-10-26 Affected versions changed · Red Hat
  94. 2026-10-26 Fix available: RHSA-2026:89751 · Red Hat
  95. 2026-10-26 Fix available: RHSA-2026:89740 · Red Hat
  96. 2026-10-26 Fix available: RHSA-2026:89744 · Red Hat
  97. 2026-10-26 Fix available: RHSA-2026:89761 · Red Hat
  98. 2026-10-26 Fix available: RHSA-2026:89832 · Red Hat
  99. 2026-10-26 Fix available: RHSA-2026:89892 · Red Hat
  100. 2026-10-26 Fix available: RHSA-2026:89888 · Red Hat
  101. 2026-10-26 Fix available: RHSA-2026:89884 · Red Hat
  102. 2026-10-26 Fix available: RHSA-2026:89752 · Red Hat
  103. 2026-10-26 Fix available: Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · Red Hat
  104. 2026-10-26 Fix available: RHSA-2026:89885 · Red Hat
  105. 2026-10-26 Fix available: RHSA-2026:89908 · Red Hat
  106. 2026-10-26 Fix available: RHSA-2026:89922 · Red Hat
  107. 2026-10-26 Fix available: RHSA-2026:89921 · Red Hat
  108. 2026-10-26 Fix available: RHSA-2026:89920 · Red Hat
  109. 2026-10-26 Fix available: RHSA-2026:89914 · Red Hat
  110. 2026-10-26 Fix available: RHSA-2026:89915 · Red Hat
  111. 2026-10-26 Fix available: RHSA-2026:90332 · Red Hat
  112. 2026-10-26 Fix available: RHSA-2026:89926 · Red Hat
  113. 2026-10-26 Fix available: RHSA-2026:90329 · Red Hat
  114. 2026-10-26 Fix available: RHSA-2026:89925 · Red Hat
  115. 2026-10-26 Fix available: 9Base-RHOSO-TOOLS-18, Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat OpenShift distributed tracing 3.11 +2 · Red Hat
  116. 2026-10-27 Fix available: Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4.22, Red Hat OpenStack Platform 16.2 · Red Hat
  117. 2026-10-27 Fix available: Red Hat OpenShift Container Platform 4.14 · Red Hat
  118. 2026-10-28 Fix available: Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20 · Red Hat
  119. 2026-10-29 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat OpenShift Container Platform 4.12 +2 · Red Hat
  120. 2026-10-29 Fix available: RHSA-2026:90362 · Red Hat
  121. 2026-10-29 Fix available: RHSA-2026:89229 · Red Hat
  122. 2026-10-29 Fix available: RHSA-2026:89724 · Red Hat
  123. 2026-10-29 Fix available: RHSA-2026:89196 · Red Hat
  124. 2026-10-29 Fix available: RHSA-2026:89818 · Red Hat
  125. 2026-10-29 Fix available: RHSA-2026:89817 · Red Hat
  126. 2026-10-29 Fix available: RHSA-2026:89837 · Red Hat
  127. 2026-10-29 Fix available: RHSA-2026:89933 · Red Hat
  128. 2026-10-29 Fix available: RHSA-2026:90330 · Red Hat
  129. 2026-10-29 Fix available: RHSA-2026:90493 · Red Hat
  130. 2026-10-29 Fix available: RHSA-2026:90513 · Red Hat
  131. 2026-10-29 Fix available: RHSA-2026:90363 · Red Hat
  132. 2026-10-29 Fix available: RHSA-2026:90462 · Red Hat
  133. 2026-10-29 Fix available: RHSA-2026:90424 · Red Hat
  134. 2026-10-29 Fix available: RHSA-2026:90518 · Red Hat
  135. 2026-10-29 Fix available: RHSA-2026:90519 · Red Hat
  136. 2026-10-29 Fix available: RHSA-2026:90514 · Red Hat
  137. 2026-10-29 Fix available: RHSA-2026:90725 · Red Hat
  138. 2026-10-29 Fix available: RHSA-2026:91138 · Red Hat
  139. 2026-10-29 Fix available: RHSA-2026:90726 · Red Hat
  140. 2026-10-29 Fix available: RHSA-2026:90994 · Red Hat
  141. 2026-10-29 Fix available: RHSA-2026:90757 · Red Hat
  142. 2026-10-29 Fix available: RHSA-2026:91646 · Red Hat
  143. 2026-10-29 Fix available: RHSA-2026:90271 · Red Hat
  144. 2026-10-29 Fix available: RHSA-2026:91172 · Red Hat
  145. 2026-10-29 Fix available: RHSA-2026:91191 · Red Hat
  146. 2026-10-29 Fix available: RHSA-2026:91329 · Red Hat
  147. 2026-10-29 Fix available: RHSA-2026:92372 · Red Hat
  148. 2026-10-29 Affected versions changed · Red Hat
  149. 2026-10-30 Fix available: RHSA-2026:91720 · Red Hat
  150. 2026-10-30 Fix available: RHSA-2026:92217 · Red Hat
  151. 2026-10-30 Fix available: RHSA-2026:91572 · Red Hat
  152. 2026-10-30 Fix available: RHSA-2026:91587 · Red Hat
  153. 2026-10-30 Fix available: RHSA-2026:91958 · Red Hat
  154. 2026-10-30 Fix available: RHSA-2026:91632 · Red Hat
  155. 2026-10-30 Fix available: RHSA-2026:91651 · Red Hat
  156. 2026-10-30 Fix available: RHSA-2026:92451 · Red Hat
  157. 2026-10-30 Fix available: RHSA-2026:92509 · Red Hat
  158. 2026-10-30 Fix available: RHSA-2026:92497 · Red Hat
  159. 2026-10-30 Fix available: RHSA-2026:92480 · Red Hat
  160. 2026-10-30 Fix available: RHSA-2026:91719 · Red Hat
  161. 2026-10-30 Fix available: RHSA-2026:89198 · Red Hat
  162. 2026-10-30 Fix available: RHSA-2026:89655 · Red Hat
  163. 2026-10-30 Fix available: RHSA-2026:89626 · Red Hat
  164. 2026-10-30 Fix available: RHSA-2026:89726 · Red Hat
  165. 2026-10-30 Fix available: RHSA-2026:92858 · Red Hat
  166. 2026-10-30 Fix available: RHSA-2026:92859 · Red Hat
  167. 2026-10-30 Fix available: Red Hat Developer Hub 1.9, Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat OpenShift Service Mesh 3.0 +8 · Red Hat
  168. 2026-10-30 Fix available: RHSA-2026:92860 · Red Hat
  169. 2026-10-30 Fix available: RHSA-2026:90274 · Red Hat
  170. 2026-10-30 Fix available: RHSA-2026:89341 · Red Hat
  171. 2026-10-30 Fix available: RHSA-2026:89839 · Red Hat
  172. 2026-10-30 Fix available: RHSA-2026:89715 · Red Hat
  173. 2026-10-30 Fix available: Red Hat OpenShift Container Platform 4.16 · Red Hat
  174. 2026-10-30 CVSS score added · CISA ADP
  175. 2026-10-30 Weakness changed · CISA ADP
  176. 2026-10-30 CISA SSVC decision points changed
  177. 2026-10-30 Fix available: Red Hat OpenShift Service Mesh 3.4, Red Hat Satellite 6.19 for RHEL 9, Zero Trust Workload Identity Manager 1.0 · Red Hat
  178. 2026-10-31 Fix available: RHSA-2026:91342 · Red Hat
  179. 2026-10-31 Fix available: RHSA-2026:92516 · Red Hat
  180. 2026-10-31 Fix available: RHSA-2026:92861 · Red Hat
  181. 2026-11-01 Affected versions changed · Red Hat
  182. 2026-11-02 Affected versions changed · Red Hat
  183. 2026-11-02 Fix available: RHSA-2026:93617 · Red Hat
  184. 2026-11-02 Affected versions changed · Red Hat
  185. 2026-11-03 Fix available: RHSA-2026:93596 · Red Hat
  186. 2026-11-03 Fix available: RHSA-2026:94254 · Red Hat
  187. 2026-11-03 Fix available: Zero Trust Workload Identity Manager 1.1 · Red Hat
  188. 2026-11-03 Fix available: RHSA-2026:92286 · Red Hat
  189. 2026-11-03 Affected versions changed · Red Hat
  190. 2026-11-04 Fix available: RHSA-2026:89713 · Red Hat
  191. 2026-11-04 Affected versions changed · Red Hat
  192. 2026-11-04 Fix available: RHSA-2026:94575 · Red Hat
  193. 2026-11-04 Fix available: RHSA-2026:94571 · Red Hat
  194. 2026-11-04 Fix available: RHSA-2026:94569 · Red Hat
  195. 2026-11-04 Fix available: RHSA-2026:94572 · Red Hat
  196. 2026-11-04 Fix available: RHSA-2026:94570 · Red Hat
  197. 2026-11-04 Fix available: RHSA-2026:94573 · Red Hat
  198. 2026-11-04 Fix available: RHSA-2026:94562 · Red Hat
  199. 2026-11-04 Fix available: Red Hat OpenShift for Windows Containers 11.0 · Red Hat
  200. 2026-11-04 Fix available: RHSA-2026:95015 · Red Hat
  201. 2026-11-04 Fix available: RHSA-2026:95014 · Red Hat
  202. 2026-11-04 Fix available: RHSA-2026:95016 · Red Hat
  203. 2026-11-04 Affected versions changed · Red Hat
  204. 2026-11-04 Fix available: RHSA-2026:95209 · Red Hat
  205. 2026-11-04 Fix available: RHSA-2026:95206 · Red Hat
  206. 2026-11-04 Affected versions changed · Red Hat
  207. 2026-11-05 Affected versions changed · Red Hat
  208. 2026-11-05 Affected versions changed · Red Hat
  209. 2026-11-05 Affected versions changed · Red Hat
  210. 2026-11-06 Affected versions changed · Red Hat
  211. 2026-11-06 Fix available: RHSA-2026:95518 · Red Hat
  212. 2026-11-06 Fix available: RHSA-2026:95576 · Red Hat
  213. 2026-11-06 Fix available: RHSA-2026:95234 · Red Hat
  214. 2026-11-06 Fix available: RHSA-2026:95519 · Red Hat
  215. 2026-11-06 Fix available: RHSA-2026:95638 · Red Hat

References

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences