RHSA-2026:89031HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

Published
October 24, 2026
Last Modified
October 26, 2026

🔗 CVE IDs covered (7)

CVE-2026-84445 →CVE-2026-97031 →CVE-2026-111943 →CVE-2026-46600 →CVE-2026-56851 →CVE-2026-78667 →CVE-2026-78669 →

📋 Description

CVE-2026-46600 — golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing CVE-2026-56851 — golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile CVE-2026-78667 — net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78669 — net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-97031 — crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-111943 — crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates

🎯 Affected products38

  • Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:1bb29ecd0fec19db1006ca222100fc94c08486498b3bcd444d9bf40363f6f3f8_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:64735957500a31bc6a0d59dbb0de76e80d0b13801395ce02210a9c684c0dd7c1_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:989969fd1ba43c9e7f80e6ae28e1a312dd4f2b46f43116edd5a6b31a62b3cfe2_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:d00cd476bd30955388efd6c75582a9b9d94b2bcd24f459ce20939a6ebac598d4_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2fa2a88d20ba19cfe2a5b4d96c308b090b253abffc4afdfdf7bd8b42110b0f96_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:58d539853eb67de3dd7bd2c0dabe532213751a81bab72eaa41881b715964e3ad_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5d7f64f87b0d2e972a013555a27fec3fe8dc793fc6deaf76ef4329b20f2f6476_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:6828ac97725fbeeb5586c3007eb8754702f293892fbadb1c83b569d1a8aaabd2_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:83889f2639b9b37489740820b9b523cc5a83b1fd0c108eb3ef2f05e7c58c4521_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:8a7e9068f2d7f33de3d7e87ddab582555206fdddf7644c35557a73cac114f997_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:d302ed931c6dcfe2500ef660bc15e424a4e6fc9ac77fd47ed03af70110150196_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e8ca4669a67e58230f144375ebdad708e5cd263525d2054a04dc7164da6c7d72_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:45b068b6fdbdd98d462e66e44d0d47607d3d0c8a77e9124ede6439aa42ccf1df_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7fc7ac36a0e860ac6e7205d9b9ce6745f8fbfbfc155cbdf5516400dd15a6c58a_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:82348baab9604f5375cfe45f84ce180d21319843cec9fec74ac345c4523955e9_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:95a95d61db2db27bcc0ee04fa13362e29af804963aedc497bd5b23af06a76767_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:775cd8a21742824bd66e85b55f5480be7b7a98cebf8a8db6a4f6937760afe22d_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:23101b95b5a0b6408ca232a551d43aba4a8c84fb1f0d740cf13a70de45f5b92a_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:6a596fc1b69a538085e176f80889ea62a1b4346299ad200c3c32f1cfff4a4018_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:c5d894cc5b13fa2bb5bc96ba606a96a1f79bc07ca91be68ee8b1a4a4652119b1_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:fe61452304c6e31a0089127da68ebde0a0e9a8de8b5899d20819947ab9e2ca0d_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:1ecce48ef98afe7dcd423a2d2f985a46b7ac53d6d2bc97078710a48d67ddf3bb_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2812a51e016ca82bf78a0821b75e630f76c5e9fa90bd9f0516fbc7f36add8345_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2ade181adcd0b4e7dd72393e595f8213e72b5f1b53204a39f4a9e167171d2767_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:70f2a035ad372648188bc3f31fa4bade5b270badadd35cc1f66cbc7fc6736f11_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:4c3fdfe29a8998d31e238a1aaaf50091539b3ec224ba1d57fd6daa82fa61a768_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5cb0a4d93d5573586852081db2d896ea89d49c4233a12ef75248c1e00e646fb1_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:8b4dd28fca42acb0c5ca41caae02a5ff7e92667cbfa9900bb14c60d8b75e6e70_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e3d083302f36b4a06ca3e589391c07a130ae31278a0a6d1718423b166df0b55f_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • +8 more not shown

✅ Remediation

It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: In case you consume HTTP2, upgrade to a patched version of the http module. Verify: ``` go version go list -m golang.org/x/net govulncheck ./... ``` Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (10)