RHSA-2026:75863HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Published
October 5, 2026
Last Modified
October 6, 2026

🔗 CVE IDs covered (3)

CVE-2026-56860 →CVE-2026-56858 →CVE-2026-56859 →

📋 Description

CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

🎯 Affected products25

  • Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:dcd7b445ec0a8693f33e336addafcba436c82011165a495296241b10cc8714ec_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:e4354752da52e03df90a3248ced8d133aba40346de60ff6b96df954f867e331c_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/bridge-marker-rhel9@sha256:ed9e5f4e984c32d57929d11c36951b748f592f3835f7ad09eb36a711cc6bb6ed_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:01dc819fcfae78c6ea3c44e7ff0c9c3ab38ed24119f41f18e4a528cbd87262f9_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:46a9eabc2c546068bf2c9279bcfe84519875c8f4f8799c1afbf02b67027d5043_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:f10ae3ba63026b57dd5198dad29ef9f08e3c9adeacc78231de0f80ea3b060ddc_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:314c0ed7a5c55b6f56d264c549bda8d1cb54179bd663bcb3792a53435a3ee141_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:7b44934f0b358883f5e787d8d7416c799da094172c491fac1597f0f2c65b7a67_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:d00702511d7f582777c1890ff4ec3f1e1c782204a773928dc6c385b097264085_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:15e7ae611cb75c2a46886eb2dcb2f3906d7149d9d4226292e9395523e8358769_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:7bd5c3ff62e13e78a2c1d7488e24a90f4a4b7fb1d337715ff4e6ba72016ef961_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubemacpool-rhel9@sha256:be1e2df68637ef725f7c80ae044084dac7d372dbda1eb7f2dec641ec154ed605_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:3ce3f57d4feb087e70745825de888277519787146f588fc8fbd9b5b6233414c3_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:738dfa0ab874d4ac1217e966fbd179ebc953a2a71f9ec4959734a84c2cbc2b5c_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubesecondarydns-rhel9@sha256:817065e36eeccf973563db7ea3da2ec89137ac83dd0a18dd7a440983fc345c6c_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:7a23f1cb7041bd1997ae8472a38abf8bd30582197a03aafb0be245e9ed60dd23_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:97f8d2acea6e635435a232059f548decabc5fd25d6a8d7da1679c80c465bfe25_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/kubevirt-ipam-controller-rhel9@sha256:f4e26869b26202a6399afd493b3eaa25df9b11a44f1df63d43718218289a8209_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:51fbc68be727bf57307e301cca11222ffa908c24c69e7b53018292eb0b8d4795_arm64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:80a3f2469d90ab3dfc6f6f60947e4f2e5e6b6b2029cc4d9e8f10defb2d19f4f8_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/multus-dynamic-networks-rhel9@sha256:b6157908f9157d61aabc040aff7a96657ecc8032187b79891939a758cb55f0d2_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:c004d91e36cb0b4617cfe94b159bbf2cb98cc9909766db13e43ec1204ae71f3a_amd64 as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:cc85585d2a7b7e192c7528acd02412976eb4f8a4f86f8db56f325dccd044870e_s390x as a component of Red Hat Container Native Virtualization 4.21
  • registry.redhat.io/container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f85adf0feca29be7a45f6c3e07cd8a941f1d9b25f02291bfadfd9e1abd073e83_arm64 as a component of Red Hat Container Native Virtualization 4.21

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)