RHSA-2026:89081CriticalCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.3

Published
October 24, 2026
Last Modified
October 26, 2026

🔗 CVE IDs covered (8)

CVE-2026-111943 →CVE-2026-114406 →CVE-2026-46600 →CVE-2026-56851 →CVE-2026-78667 →CVE-2026-78669 →CVE-2026-84445 →CVE-2026-97031 →

📋 Description

CVE-2026-46600 — golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing CVE-2026-56851 — golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile CVE-2026-78667 — net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78669 — net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-97031 — crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-111943 — crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-114406 — ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

🎯 Affected products38

  • Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3612b9e9b1439b3906d47a91add8f5132b49323da6ef17cf37332b8f150f9a85_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:512cf0f003b403ee336dbef4419bdb6425ac91970d0fe8cc2415627030fd3656_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:84528f7c27d16dd4b9d57ad66ec54d701ab82da6185a1e13d39bfd3b5f94bc37_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:e3afaddca28a649465538ac4e5e63834be5e384b58789758a8a449fbf34b1eae_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:5f1ff4eb90abcfa3e8ceebe366931e921e920a3908fc77dd9a378aa08673ba03_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:da9af84079c4a991500b29de22008f47b24edb0ffe251ff0d2e05bf89ca10e73_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:e96a41f4107151a83e1dc88e966fc943bd6ba49146cfabdac3ad2ea007eef40f_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:ea3bd394d0a2bc28c8fde77cdc2dcf8fa9dcbd3293acd2950a621ffa8a178aa7_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:406428f059677b608761404ef30a743c2b1586369b4c722cae4f61cb39b0448b_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:40f687aaaf87de64999c41095749645f61bf2d9e21da6e6fa90d506f7b2fb0ea_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:b0717ba6e99e12b0885c048c354046e2a60ec0c4d7f30c11029d05633004cfee_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:c1da7462af48d099dacf749adb89e501019d654221b7b3444476230644f33d00_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0ad995456769ab5d279c2d660c2df2a5fd7e3429c1f9703249cb36be361759f8_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:bca22525d49539ef38909986bb145da1633057e24da2cf24ebdee5cdcb832a80_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:ea64f35a0fc879ccb9643fb840e1858f009325134ed684824c4e118030c8686f_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:f5ad6ba737e85b2caad30c3fa46f822029588168f11101c9ae6431aa35ac4406_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:7c8e411b9c54a00dad3798858a6ab3f35322539c6601a068fe9c0f7ab1911852_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:2b114556291124407ec192d65600651408657af8fe7ae05354d4de07aefb5495_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:72d0bc3ed08d37aad46048a2870b0f7d347c6e23f8203b38f0cafd01fc334b04_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:8ef1f4e568343a02a8ff51180dfafaee87ffb7fc9e7e5ee4f8448960d2580078_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:9f5670a6166e7ba2c21f57a66760715d3c860ebd7cffab281873a8630dc3289a_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2cdb2598bc30210b5e4bf36d850ee7b08192c1838c27967f24f201e7f96f6740_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c1872971a62b6bc14fed7bf7ecba936a76c3028ff138b8d632f488f87d84ae06_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:c75a95c728295f8d2559af9e147e585a5147eb8e8792655fdcfcb5432e218271_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e2595dd2f099c5164aac9f40bb8041e5af007d33b731e0a8047925756fb5ada9_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:5799f21ac04c4c64946987181f89a796a9db750bf8dd39d635c36a08803beef9_amd64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:6c0a1a8e7c4ab37388ac9e3e67a737058f232350f5821638f7cadefbd71c32f0_s390x as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:983827df4e1ac57c4e85bbf991b593f571efc7d193323f381ff6e32c0bb9c276_arm64 as a component of Red Hat OpenShift Builds 1.8.3
  • registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:9de24ec7dd5a7eb4c49a2b61b9d79332b0b316bcbc38a8086b68eb04ecbfec65_ppc64le as a component of Red Hat OpenShift Builds 1.8.3
  • +8 more not shown

✅ Remediation

It is recommended that existing users of Red Hat OpenShift Builds 1.8.z upgrade to 1.8.3 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: In case you consume HTTP2, upgrade to a patched version of the http module. Verify: ``` go version go list -m golang.org/x/net govulncheck ./... ``` Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (11)