RHSA-2026:26571HighCVSS 8.8

Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update

Published
June 17, 2026
Last Modified
October 24, 2026

🔗 CVE IDs covered (5)

CVE-2026-32280 →CVE-2026-32281 →CVE-2026-32282 →CVE-2026-32283 →CVE-2026-33810 →

📋 Description

CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32283 — crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

🎯 Affected products18

  • Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:2a0f0b93de03891816258421c4ed80e784edf101b504afec5f40f7de3f30f24c_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:55b062c25c2ac2db43aaba84d6f2385241d866aec42385271b1bda26f019d848_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:637b85ceff1e49c9c09bdbe8728afe90090b48948ad4c828d573d2b1375e7850_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:e111b20260696447ae76f0c3d7bdbade3310b4819e8354ae48583f3ca91861e3_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:372578fd564128ed32a88e09594ba16a7ec3c061a8157c88abae757418ccaded_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:754211edf86bc9ddbf20deba2f2eb518f86747678843f0fc928ee675fcf720a4_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:b4712b2728c2807401a6f25a3e6b0e4aa5611e5d97b06979c65ea0fb722c57a8_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:cfb65df163b8c3870132a4a5568f982f1af966d0820e18e99adbfc4fa3ca6ada_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:138d6ba8e1b5a3745294e6eb46d23614bba97ab118a4c3689283afc314e7abb9_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:cc59d7a70c3fa544287c547c1e682bab494c38d6b7970740ab80f0aee4aa73aa_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d2c692acac9c5c940b44cf0e101ed008ca87e54785983e3d926dbff197d55f71_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:fc9341140942df8b2a3b4c4e6aad53e39359b7ea9323ab306fcf791b5713639a_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:dd5ac6b523658a5d8a07c39e20b6538686d8680d16aec8ffb0c0568a586d34be_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:4b1711f8797d6fa769988788e57be4949e14a4c8ef2b0f771fb1bd9692e16bef_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:7b2ee5ad206e3927ebf154a90c07b9504b4bc9277555927319d8c802962fca47_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:e049f9e0b136ff6a0fd940b74acfab5aa0b0b09981b64202e1bbcfe980da7095_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:ff3fe41e6e368a377103afdb386ecb86107d2091439309927b4f5c19af793a88_ppc64le as a component of Compliance Operator 1

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)