RHSA-2026:73413HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Published
September 29, 2026
Last Modified
October 5, 2026

🔗 CVE IDs covered (5)

CVE-2026-56860 →CVE-2026-56862 →CVE-2026-33818 →CVE-2026-56858 →CVE-2026-56859 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products25

  • Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:aadf6ad8aa18ef0379d72a1dbba0af3f8279c0b5580cfb010c4e779c8e62d6a3_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:be78dd0adfa28bbc16deafb4c9bbd2f1aea454032052ccd36d424a9fbf703a25_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:c20799c23809c4050642ed82ce261b8dde0d51d6cd640768d96230e4352eb659_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:651ff90e475b5fe27344f1ed88f0b24d63999ce289ec612a99aab104e4a693c4_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:85c78b67228690a1e8e52afc1b4babaa6a380e440379c9bce137e25495afb3c6_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:967248626e3cc75257db7b44d65d9cf23d780ce4afbc4b70d616c8799f58f7b7_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:0b54430fc9c9cf6b7cdcb691182932b3b1878ed84cf3193c1d9ca95e27cd625d_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:354b50256d5ee89402c6121ab08f4d77bee46c741e73030afb2cf2f4602d688d_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:9db64665f01ef602c99c64b44008f9d235caf7ba1f77ed19a447f4eecaa54b49_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:54fb5fab1873cae1d43238da3aaee9f5d154f71026b619c1a3e9090ebe73942d_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7d0e25ff13ca7fc87d73ca7a0c5dd5d496640b8228109a9644ce390f380d0a4f_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:8966b8f58e8109321da9d11738791cfab1a839cb3e0b0d4852984aeed29aa22e_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:1db3c17d734f648355e057c356459e5041e350f9d86e9af237e1dfc1fe661d76_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:a1c09e9b64a33412e9627cf54444007629282a909b2cf64a1613f46662813048_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:c353628beff281aa1c95e9e5117807742980a678a5a37bb1a2a77a2c48a5a689_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:30a29c18acfbf1be8212449a803483e8630fbf2a62973b837772ba2fd8ac9d4a_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:324ce4df4f6076ae9ee69d46fc161f57f6b92843c1d1b36e680c1cfa0d18b1f0_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:8edf75605e98ddd306b161ab343024f465698a524472dfc05789afefab610037_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:395a8972a294d9daf107188108b1f76aafe0fd0959b4106adb37681ddc716a8a_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:45c1f90909172b6f633e3df0464ed5a5fcb24fe7553b84e6b92afc09d1ccb024_arm64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:a3c8a662ca2a4f6b3a5c2d78165b9d4c9df7adf54355d62dea65f97cbd2b54cb_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:458cda4b3f158f380ba8bebb973bf7253705e69bad97c1902d19c0219a81fb03_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:50e94166666f0d98a11bf3c91fb9d145c7c27e11e50225311466291808d57389_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:fd20aa515ff6e7f7aac462e8d786cd97b626ccb86dd7fe669c3e16d04f9aa083_arm64 as a component of Red Hat Container Native Virtualization 4.18

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)