RHSA-2026:8337HighCVSS 7.5

Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.

Published
April 15, 2026
Last Modified
August 15, 2026

🔗 CVE IDs covered (5)

CVE-2025-61729 →CVE-2025-68121 →CVE-2026-25679 →CVE-2026-27137 →CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-27137 — crypto/x509: Incorrect enforcement of email constraints in crypto/x509

🎯 Affected products5

  • Red Hat Web Terminal 1.14
  • registry.redhat.io/web-terminal/web-terminal-exec-rhel9@sha256:3c82f905387f86f41d9b8d0acd2a27b448d050bee44c2d2f37f98fefc907a7a3_amd64 as a component of Red Hat Web Terminal 1.14
  • registry.redhat.io/web-terminal/web-terminal-operator-bundle@sha256:f729c368c8c4024a93c6cb8e46a45d1e2d6e99df5cedbc1e613a4798f5cbbfb2_amd64 as a component of Red Hat Web Terminal 1.14
  • registry.redhat.io/web-terminal/web-terminal-rhel9-operator@sha256:7ea6fdd34e982d2bcd7239936c7322c3d91173ce50a932e05b8995d008625cf6_amd64 as a component of Red Hat Web Terminal 1.14
  • registry.redhat.io/web-terminal/web-terminal-tooling-rhel9@sha256:d066e6bf5de5495db36fae45c2fe16b2362c2a9142248371d73283e76ac62ce0_amd64 as a component of Red Hat Web Terminal 1.14

✅ Remediation

To start using the Web Terminal Operator, install the Web Terminal Operator from OpenShift OperatorHub on OpenShift Container Platform 4.19 or higher. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (14)