RHSA-2026:22958HighCVSS 8.8
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.12.1 release.
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
🎯 Affected products5
- Red Hat Web Terminal 1.12
- registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:6ad3960afaa0637ad2d35dbfd600a9e7dad878b8066e1082c7e5ad1a3067438e_amd64 as a component of Red Hat Web Terminal 1.12
- registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:866e1419229fc2f2808584e548b6514be34782119ee49e850d5b82f8e259d3ce_amd64 as a component of Red Hat Web Terminal 1.12
- registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:c3ab73f703441fe2e8043aa3a3b2b6172dd62c5a05802adcdd70659a34db77c7_amd64 as a component of Red Hat Web Terminal 1.12
- registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:e444b528f0586cb771f8e550ec5b32b01f63a2b84c29b495efdf8de5965348b2_amd64 as a component of Red Hat Web Terminal 1.12
✅ Remediation
To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.17 or higher.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:22958
- externalhttps://access.redhat.com/security/cve/CVE-2026-32280
- externalhttps://access.redhat.com/security/cve/CVE-2026-33810
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://redhat.atlassian.net/browse/WTO-402
- externalhttps://redhat.atlassian.net/browse/WTO-413
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22958.json