RHSA-2026:67707HighCVSS 8.1

Red Hat Security Advisory: OpenShift Compliance Operator bug fix and enhancement update

Published
September 15, 2026
Last Modified
October 14, 2026

🔗 CVE IDs covered (7)

CVE-2026-56853 →CVE-2026-56858 →CVE-2026-56859 →CVE-2026-56860 →CVE-2026-56862 →CVE-2026-33818 →CVE-2026-46600 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-46600 — golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products18

  • Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:15aa0b19576a5045db03943b5212b06f181bb4a0398470f5030ca98c7ba4f27e_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:44098da4bf9006975f2c97c8191c97c6d2bf708a8f4049dcc8168651879fa10b_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:ca2ad51304a75e4a235ea4f94faf09e6a1ec0c932b074f2a66f81229baa4f33c_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-content-rhel8@sha256:f8c4171a4dd77dccf5f0299c2a9d162cf71bd00d5846765437b2d393bc6f8d74_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:101bc16f3e3821ffcad3a55c86105e47568ec6e90d78119f1f36bd89f8b44c01_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:2f577b5c99d6c61f81c51f88913288fc78390464f4cc1c2478a3456a37a064fd_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:4f50a235e45f4082c45619abf3299249f9ae70bb9d7dc0aa8d2f02c4883428da_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-must-gather-rhel8@sha256:9c412cee0b734047e96cdf1908bccca25c5185c82552c5105ad6d46f096284fa_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:19e1853d054a81bb13c970f9e4a2785bf55beb9ed96018d3ab1dcd7da78603c5_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:6ce9872ca6f32df3b3a2fa7dcb7dde39e7ae0a298c1a33eb7dfccc262772021c_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:8d9902d42dcc03b52af80c7d3be127a6c24a49abae8cc7c2f571e529720ed00a_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-openscap-rhel8@sha256:d18a06409ed1f8d2e2a93b0dd3c0a9d510da9c32af4c0714c9a8cd26ff590abd_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-operator-bundle@sha256:d570f559988ff9ac6dae93191593d32fe72350c9e869ae72c0d9e27d2cdb66c5_amd64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:85b246016bbab0f0bf5b6fc001b576071a53ed011a5edc40a63ad941ff34707c_s390x as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:982e0adb427850c290bf89e63fc58da7d93c35c100b867bdbafdd2a310374f30_ppc64le as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:f8173db83313879cca3221df85fdae8b564f3dd576519bb1a518034773a5539a_arm64 as a component of Compliance Operator 1
  • registry.redhat.io/compliance/openshift-compliance-rhel8-operator@sha256:f90c82b9df6dd6d65928f84fbfed6011b0b280c9be2bcdbb7bb733af30cb6caf_amd64 as a component of Compliance Operator 1

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (10)