RHSA-2026:98911MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.20 Images

Published
November 11, 2026
Last Modified
November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-84375 →

📋 Description

CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

🎯 Affected products4

  • Red Hat Container Native Virtualization 4.20
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:b577a2f63201f993c6ebeea3fa045c3c0798e02fc0fdbf9f11072d62888df75b_arm64 as a component of Red Hat Container Native Virtualization 4.20
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:cfcaef6581c2d481d39c4e2f17850547dcf3d8471fe743b995bd821fb17304db_s390x as a component of Red Hat Container Native Virtualization 4.20
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:d47a9ffaa7fec663156e04173c8f42fdfd3cc1fb47de2e17505963779752e392_amd64 as a component of Red Hat Container Native Virtualization 4.20

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)