RHSA-2026:77899HighCVSS 7.5

Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.2 release.

Published
October 7, 2026
Last Modified
October 31, 2026

🔗 CVE IDs covered (5)

CVE-2026-56862 →CVE-2026-33818 →CVE-2026-56853 →CVE-2026-56859 →CVE-2026-56860 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products5

  • Red Hat Web Terminal 1.11
  • registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:492db388485e71ccc79d35f7ee504b5e5545ae376e9a82cdc2f319382fca8a25_amd64 as a component of Red Hat Web Terminal 1.11
  • registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:5bbf516dcfa5afbeee5e5b600cf1dd558b409b6c791db6cee07b40b8446a0564_amd64 as a component of Red Hat Web Terminal 1.11
  • registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:624bcc05dc21cf9c17e815095102da60fbe9ff75ba6181a7123114b5bc1b8dde_amd64 as a component of Red Hat Web Terminal 1.11
  • registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:1ee5b2352176e8ae17af01e9bd5a5dee731d3f6eb8875d0364f557a44e58e782_amd64 as a component of Red Hat Web Terminal 1.11

✅ Remediation

To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.16 or higher. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (13)