RHSA-2026:44868HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 24, 2026
Last Modified
October 12, 2026

🔗 CVE IDs covered (3)

CVE-2026-44283 →CVE-2026-59818 →CVE-2026-73500 →

📋 Description

CVE-2026-44283 — etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access CVE-2026-59818 — etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener CVE-2026-73500 — etcd: etcd: Denial of Service via unbounded TLS handshake goroutines

🎯 Affected products4

  • Red Hat Hardened Images
  • etcd-0:3.7.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • etcd-0:3.7.1-0.1.hum1@src as a component of Red Hat Hardened Images
  • etcd-0:3.7.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: For OpenShift Container Platform until an update can be applied, reduce exposure by restricting network access to etcd server ports so only trusted control-plane components can connect and require strong client identity at the transport layer, such as mTLS with tightly scoped client certificate distribution; these measures limit direct access to the etcd data store but do not replace applying the security update. Workaround: Restrict network access to the etcd TLS listener to only trusted clients and networks. Configure firewall rules to limit inbound connections to the etcd client port (default 2379) and peer port (default 2380) to authorized hosts. This reduces the attack surface by preventing untrusted network attackers from reaching the vulnerable service.

🔗 References (7)