RHSA-2026:70006HighCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.14 Images

Published
September 22, 2026
Last Modified
October 4, 2026

🔗 CVE IDs covered (3)

CVE-2026-33818 →CVE-2026-56859 →CVE-2026-56860 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

🎯 Affected products15

  • Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:35dda7732a15cc5983305ebc00a4083eb0fe8653eeae2058da05e161f4f067a3_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:530e4f42cdaa65cf5818697e00b783f12e723a0abc163393a0dca75b255d6388_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:3a910b74cd5ef1451d8220cd928fb1b751f8a3f0e4655c7a1d7ee0b17f959cee_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:e5f01dcbfc0195c29d4f3d4c62e073c646306479f1d1f285faf1146bc9a31cb2_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:37ecb97648e266355a3211ccfcf116dbd6297f95a72eb94b942034b92f29d7c6_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:757605ac6091323196f60695fe5d415edab7deedc2ac5b4125e8db56bcd0fe4a_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:014de8822699151ac4df6d982b626ac05d6d0b28298142c2b02d48fb0df5a9a9_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:4a6afbf8273c13eb05693060c8ab5c59cdec3ee4b599e2efead825b41eec0de8_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:ec3df23d4a6169e353891e5c75e8f1f1228560777dddf45fff33228cfd0f23ef_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:f87622d014db38428f3d8315e4ee0a5d3e56087e7c62ecd50a7e8ce0ca4c1115_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:504a6f0f65e21cd103ac3947e96f2df0104f7ece35afc60c6d0865c0a799826d_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:861fce501ec3d9008c85298a8e9bf11cb77ab5bd85b14cde32699d9536477a7a_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c6861394445d24e151d97a3d013be5fa647adc9524f7febebf5c627d5aae560f_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f15e376c3ce276640a4927a927e092fea1a6d8196d5d2f98ec2efd0f10d6199d_amd64 as a component of Red Hat Container Native Virtualization 4.14

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)