RHSA-2026:69925HighCVSS 6.8

Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.1

Published
September 22, 2026
Last Modified
September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-56854 →

📋 Description

CVE-2026-56854 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions

🎯 Affected products38

  • Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:017d7ccd5623440a70af44411881c65b317114450125b1d2579b84bd0359464e_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:3327d8e63dc7a17cd615a1be47c59030d63a00ae097db258812025554462bbe7_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:4b876fe1a4580ab6820a128d8aa5b2f651c5b910272c6507669cb9d3c74aa547_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:d48e99b61667e96fd543b24d4f414d2cb5cd140c5edb709129fb61c76cb5f288_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:0168c0f1a362be995c251c51c95b3189f5ddba7d4a04d5ed218826b68c203d8a_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:157496af59d258fcb559cbe390ec05b0ee41ffffc818ae2dce18e62ac3a60d61_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:6a57d28c3805e0e1f1ab15ef7a0e1e1f63c9b3cec4d23dec49ea384d461e77e0_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:8a869c07db98c11627254d95b9d18b3f918e4fe61295f8567737be275e81efe6_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0386701b669723425d61bc22dc9b3abd8bc915c8ad83847088d7dba1c55ea9cd_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:05b72ad8c1b0ef613e15ec475f7491e5f175dd44777853d951e95538f6a18575_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:4f5c61e0b8eba2c990c13f43ae14680f4e1d843227467a606179a7b8644956f9_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:5c16e5da8a4b7198bf6ceb2133e78d58529be3b34cb9368be4ea700d9361cb4e_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:0b71d22a557703792e76edae9b0a9225eb2a702f738a67aa789258b312094946_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:59014ac2f4ea89f368b23688bb1f7e23c04421034db48df4f6f080cead2c3b80_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:ab45fc2cfd32144e9bc7ff2f9c91fc114a0be9ee53d4b8642561428670e00a03_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:ec7b4c9258747f0547246950056e99c00abc87865c0e1d4a0101fb4c9f45f5d1_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:8444eb383f36d577b2e76146519648d101e5c7db3ff6ad55c3f8f56af27c21e5_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:31f4fcafabf0d509ad9cb4da4f53100d784ecd34028268d1ea3858e7ae443f4e_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:858a0f5a4f8d04de03d49d75335e6845c5392379665fdc9211e377dfecb09622_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:88aff707d9343007f12639e36cf4ac7281ecbca6985bc54583dec0a042214923_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:f22d9db7d80345d0ca0a4d4300450fe2595ebfcf3fddc4ea80602b2df0976e84_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:1cf6be436ec3a7419c4f274d835a4f449b5a3053c8c5e39efc0532c9bf7778eb_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:3d23ab29f6c67c21e4ee52480b5b1acc9a5749a52c039fa2d7ec4d173f477097_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:de86d104f5c227552bb6ff9b15714959a44c0c16696c9ab4f16c8eea31986d6d_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:e17ea560b5d1a7d46b38e237c2daa7b61337b08a0ddc6eba0c6903e400489ca5_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:3b00c14d961ff9183f6beb6fc499f16f53404274ce75a166bfcc79014a845f9a_arm64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:85ad070022736976a19a0a7df173652344afc3f82e408937df5ba877284a4f6b_ppc64le as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:d8918dca60597242bbc406d3b1f894969e71009d341211c77a7871e1f38861d9_amd64 as a component of Red Hat OpenShift Builds 1.9.1
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:dbb56583799056064db2e04f5d2906bcbf77e2d8f2658ef360b3b41b015088f4_s390x as a component of Red Hat OpenShift Builds 1.9.1
  • +8 more not shown

✅ Remediation

It is recommended that existing users of Red Hat OpenShift Builds 1.9.0 upgrade to 1.9.1 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)