RHSA-2026:22960HighCVSS 8.8
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.1 release.
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
🎯 Affected products5
- Red Hat Web Terminal 1.11
- registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:f6846f4ca643e9472f3e438789e40418573d4bc1f1f9200a5876ca81c3fd36fb_amd64 as a component of Red Hat Web Terminal 1.11
- registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:cec86a878e36a05026d5fbb20070bcfdee682ff19ecfb6ab09d81ef46e6dd922_amd64 as a component of Red Hat Web Terminal 1.11
- registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:78adb6b9f3c90c8a5b52896f6cf64ad2687119996cafe6f7f97edd2cedd46734_amd64 as a component of Red Hat Web Terminal 1.11
- registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:b21f1c080c1f3adf93b9a128670467ca57aef5a0e3d5d8fc2be83eb74a046003_amd64 as a component of Red Hat Web Terminal 1.11
✅ Remediation
To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:22960
- externalhttps://access.redhat.com/security/cve/CVE-2026-32280
- externalhttps://access.redhat.com/security/cve/CVE-2026-33810
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://redhat.atlassian.net/browse/WTO-401
- externalhttps://redhat.atlassian.net/browse/WTO-412
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22960.json