RHSA-2026:72881HighCVSS 8.3

Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.6 security update

Published
September 28, 2026
Last Modified
October 5, 2026

🔗 CVE IDs covered (4)

CVE-2026-33816 →CVE-2026-41178 →CVE-2026-42502 →CVE-2026-56852 →

📋 Description

CVE-2026-33816 — github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability CVE-2026-41178 — github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers CVE-2026-42502 — golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering CVE-2026-56852 — golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

🎯 Affected products177

  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:4c4a2c4ba273d0ca59a2fe640395adae9151caa458cf775c16cc6025ad2f21bc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:6f5c3264304c6e8159f959276e7cd474f3152a95077dbf4f6132af98610a6839_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:df20f0b3e91d9baedd5ef118fcfdc223cac557d73f173f886c7978639d83a33a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:e295e847e5abf88839dea5ed137275d73dec2a44eaddf8d1dd1b64158332a5b0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:4582b370c707dbc8a610e2b4afcd827dd9a5f73ec0f9a0e678291483b4d201bf_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:75cc2441245366ee3894f9f5a3f61bf89e41f7b275e9674b2d64a4981b4a0019_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:cef8f2a9a5a637e5fcd56f817049f19d2390e4875324ee248420d50ca9e1c9a3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:d75e7fb6959dfebe795875997f39ed8ea4978a37677d6c9630206001c89cb5de_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:1098e6607004e596115026043122b435867b9324a8222b42560704be15ba69fe_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:2a31f5ebb8be249b6a46f13daffa074243aee588e1ba3b7901b77a778456b435_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:57dce39c60f1825066d84abc8be5820518fdecc689895b3fbb71784dc449bc36_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:dd2987c98202aaf6664a599ad9825888ac37cb9d3103131568ce01c2b4f1ea61_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:19f6c27c273958500e2b5ccb9d233f2fcf6987cf7b93e320734c8eed9d43de2e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:5993985520217a9bff320f163310f986cc5e33dcba75413ec2c24ec5c3eebacf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:5bda0daccca9f754cc3ae99bc6b40d2824272a4eabff463783cfb6746a40edba_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:957d7799351cdd1d5b29bd133985e5fc5fff844bbf89ed50190c5dd10f2a2fc6_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:114bda76a2e348f0dc085d18c104ec35ad6f73e7132dcdc5aff19aba708236fc_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:200738959c8833fb7852f29727e67736d3abcc8142b2c3e2b72301cd1347d3fb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:5358900487e74a07d12273ab68927b58d55ad71458c32e3e0e21c4b190086b4c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:cd6a3fedc619a8c9f93b809c0e3d135b93c6ac1713307671bdca5957f6028c62_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:58a8f3584c8783fb9fd23e9cee75e36ab1ce7660f9083dc28750d790c538ffd6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d82b93c73b101af2c975669d0958daf4c7cb08dd79e68e6462071b910d0653e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:bc8ffd367a4804ef7a915a67ecf611fd06439cd1787e9085add3cd531b4effe4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:e07b081aaede5f15e4f4bd835439b79c479bf7ef5c9c0af3bb6947c3807ee000_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:16331d0f7d85a34843d4a9ed4512b6ad4308a10f97755fdbb25a3ef18ea1bf3c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:62284aa12d3f3d970507aab331cb4ff884542cb38cc83bda13fa8415b5385ba1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:7fff547365a312b5d7a8429390e015347b67b57c7ae0ced7e0c5955bb107ef87_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:f2dd0f08b44a15fcb8095701eaa0d28a25e3aedb14e1bdd19213bd11b3595539_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:19beeb0a4875049a1eb7fa469bb0ca11cf41e478c27ee026e4b249aac016ec8e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.14
  • +147 more not shown

✅ Remediation

Before you apply this update, make sure all previously released errata that are relevant to your system are applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)