RHSA-2026:26543HighCVSS 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.13.68 bug fix and security update

Published
June 25, 2026
Last Modified
September 9, 2026

🔗 CVE IDs covered (2)

CVE-2026-1784 →CVE-2026-35172 →

📋 Description

CVE-2026-1784 — ose-cluster-ingress-operator: Remote Code Execution Through HAProxy Configuration Injection CVE-2026-35172 — github.com/distribution/distribution: Distribution: Information disclosure via stale references after content deletion

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:850040e13a86dbec91a4ede20198563d217f74287fbc2b4028d862a9aa3f1179_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5bd73a7692d37b24d063bde15c92aa82970590b7389e150a617b2a4996305358_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:bfe0af16bd32cf7bbea61ba3125250f66451eb9d033ce597b9ef97b1d97b202f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:9c1139d02d216c838d4668c016d90e3eea927a0fe3c4ee3024f6d2eb90b847a7_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:a78ec2581106c10865bec6a331afbe164f0dedf1c164da1937cd32f82b6317a1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:e4630f09b205d4180db2b2a3ecde5f3da376d7170717387427838bde9578a7a1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:40985ea5b92d4f67133c3f5832a9de86b598577a4a551ceed0c0b679c91ec31d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:5d7a3871995cdabd50448c8ed5ce5c94ce97e8e4a890dc670d8a6a316478da07_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:6e929fa0b250bb70ea87bdf9ae74c2a39d07a326d76ba7acf6ee016438c04cad_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:a25b50cbd453e67e019c41dbab1a95dd819c14475e5f811a6a12f3ece159c1db_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:5299cc66bf2194731d74e4efe39d5a98d8f4888b86073f1acb132be889b9babe_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:2a182f6cbaf0faa0e50e23d1b29cfa112b87b5c0221f86b94aed2fe7bfc44eef_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:dc244c629d8a11b2527a1071fb4d69dfecceee8a5f41dc1d3bc31e741d93f106_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:4891e916bd08435b17506a007e77807ae83a519a7f31e71d1cd409a0bd388bc5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:46e7693a99ae74ad10fa880996e5ff22c04eb0c8e8a710b7edd3e83915ab5c89_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:7d65a0871d31adcd7dc8608c07460702b99fa58fdf1aa02d564c31f74150ad9f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:93d239f5c7c4bbacf63f1428de4a3482e043aae80aab472858cea607280dabc4_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:2b6e5d7bc43d8fca53241bc60a5e1f556556d3505ed487fcc853648a933f9d28_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:6d95d3d8aefc02ec8876b44fe8404bb6cb6bd8786be456da5efce9e77331a56f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:99597605643e1a0606ad19e0d383092a7af4584ae23e54b8524eb4c14411ba38_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:468fa7c23f0cf909d37c4d5fb877042af2234a0dac213076825fdbd887b5bbf8_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6fe2ba85996f60325a6a7a179d7245f72991aba50d76c6fb1dcda8f6c1e42171_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:a1529a68b809a6798d79e48ec390992b7d78e57b662321f6f2dab8ddf2823e0f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:e91121c1d781b7e137be903a3b397ce00f5d2ae76e6e187b1765812fc56bb3b2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:e22224eb44ff2749604b3d793361979fe52fd3eaae765820627c9047409c745b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:8b040d038e38150141733880d6c042629db16d6e1b33d149e60e2ee9176f6c46_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:098055bac8d77200e680e51f24bf8dd58360bc24d1ce390ad0b2dc938c16469e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:f0a4f9300bc3158712a09a4d8bc4079270525043bc0e91f7c485cf052273b40f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:261861effed776154814782aa53ac315d9dfd5fc3ca4ae79019a78136b1f2fa9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +162 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:b9b407bf3f979c98ce5c702053133e3fc45e3de56255c3f26471e1c430983b53 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.

🔗 References (5)