RHSA-2026:39811HighCVSS 7.7

Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-ironic) security update

Published
July 15, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-42997 →

📋 Description

CVE-2026-42997 — OpenStack Ironic: OpenStack Ironic: Information disclosure via credential forwarding during mold import

🎯 Affected products5

  • Red Hat OpenStack Services on OpenShift 18.0
  • openstack-ironic-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0
  • openstack-ironic-api-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0
  • openstack-ironic-common-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0
  • openstack-ironic-conductor-1:21.4.5-18.0.20260616204937.9213ccd.el9ost.noarch as a component of Red Hat OpenStack Services on OpenShift 18.0

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)