RHSA-2026:73348HighCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.16 Images

Published
September 29, 2026
Last Modified
October 5, 2026

🔗 CVE IDs covered (3)

CVE-2026-56860 →CVE-2026-33818 →CVE-2026-56859 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

🎯 Affected products15

  • Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c9df2166545e0a51fdb21e069254dbd63d4f974aa012b9dc1e31897cadd83e17_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:d8b356dbd85875333d3531b75cca3513a48c30026621b3807c046c87eb7864d9_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:1830dadae30340d3afb3479ecb0242e464552e2125bc2c6aaebb0e31e7ce5c5e_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:2b4519c9bfb97b6c8ad38b96d59574052a007f43ad1d9fc1d2f18b20eee7cd9e_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:73ac2e9b58a30125ee3661d398b7e6b25d01154f4c9ad178423826f1bef4ad8c_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:f5b24aa561f434825854ac7a7e2d8276a90ec23e8371aceceaf5a341aea369fd_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:1822e3da5b5756ac11801d60305e4429778fc6ba2e250ded262d4e8c7faa3691_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:cef259e6cef5acfeb1a579d9495c40557bee6493a0159adc8fde4f464c4a8be5_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:b7d205d5d801b79e7a0d61fca38b41d9509405c242e6dff44d215b4710df887a_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:da058dc6bd51fb59f69189a9d6c2877cd5754ce487b6f2818d4259dc1a871c41_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:3ecb2e4d12a522643c4b75d5ddfdd474a6e661fdf3aee6da15af796cb5de7c02_amd64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:c84e7927892741f966e00eda156e72e305e4f8bf72932fe81dca11ed33515903_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:8363cd6200d95c154fcd4928597f4a7a6ea1eed764e2f17401316ce0fdb26da4_arm64 as a component of Red Hat Container Native Virtualization 4.16
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:8713b2bd082bf127bf8f334a17a012d57f6a1d7ab2ad35c93d977b0a738e1ec1_amd64 as a component of Red Hat Container Native Virtualization 4.16

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)