RHSA-2026:22962HighCVSS 8.8
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.13.0 release.
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
🎯 Affected products5
- Red Hat Web Terminal 1.13
- registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:5520b0338d4d24d7c167cfaf781702765d214ced986941d474d64d4c3cb37e6e_amd64 as a component of Red Hat Web Terminal 1.13
- registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:ff65894cc6f9274dfa3c3a083c3159ca05807365c688438f1b90d04200ac0f9f_amd64 as a component of Red Hat Web Terminal 1.13
- registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:c8869b4951f6b4af39652783713e03adab69e9088f811ce15bf2c71c0de4ad14_amd64 as a component of Red Hat Web Terminal 1.13
- registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:fb6238202bc32b7787e640f18a19e2a1252faa0e324e41eed70104712cc86281_amd64 as a component of Red Hat Web Terminal 1.13
✅ Remediation
To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.18 or higher.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:22962
- externalhttps://access.redhat.com/security/cve/CVE-2026-32280
- externalhttps://access.redhat.com/security/cve/CVE-2026-33810
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://redhat.atlassian.net/browse/WTO-403
- externalhttps://redhat.atlassian.net/browse/WTO-414
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22962.json