RHSA-2026:26585HighCVSS 8.8

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.15

Published
June 17, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (7)

CVE-2026-32281 →CVE-2026-32282 →CVE-2026-33810 →CVE-2026-34986 →CVE-2026-25679 →CVE-2026-27137 →CVE-2026-32280 →

📋 Description

CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-27137 — crypto/x509: Incorrect enforcement of email constraints in crypto/x509 CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-34986 — github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

🎯 Affected products35

  • Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:6f4dbc7f3632ae47eb17aa2ce9e336e6e7710ac1fbfcb4c894012a98819b78ca_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:56fa9c22636ebd58eb0fdfcb85895913b9d06c5c0497603a3beff5e5bebf9eb9_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:7d3c7fea6ca43095f8b4bd8cd6e7e5aea6aa2d910a0a65f4491bfb3aac0256da_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:82a08bc9410eaa8f27ab05aff287763e2e70611fb8cac4aedb2c864cb1ee44cb_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b166bced3166496816f40414c18d281e5628b17d151b588ec922e92c9e63f3c7_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8395c91f0f78efd970aa266afbfd507a2f811fa77b0f110e417371f217f485b0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9049f1ba021aa03467478e05352c39ed1aa1289e88617d2ba7e6a9c1baa05b30_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a13d9dd8d1bb24802e3c126e3d2f9f2f2f198d663c0946d53da3e7cf6e5e6594_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:d591290a85cc270295de4ebcedf7b0f4c5007f51a22d2a6367e69add9c7249d6_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:12eb0a87d3da10cf10cd734d031000b5aba503d243ba8bcdfe12a7e6d775c350_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:3a280f9e6d1b301e829de78b22b5a9ac93f02818327d873f300da055628c966c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9c5897a18b1a166ae26c17db401bc958cdc7a4a69adc4a0ff814b372ad2a3f93_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d35ece1b60c6649b54534c9b11fea3b53f3a4e742a2ade0a07e6a28307414ed8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:350f5c0350d2e3735209797b55586300278474b085fd8de797603851d74252fa_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:66c870df2255862b975babe3fca6dee83b948db90b0f739ed3ee002b7fcfb90b_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8f3b6f87de69f0cbf60fcf7b07a115c925284c2ed95e438694e6d5282e518be2_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9f95efc1f2d811a2ce855ee1387977f50548472f3bc08b46d814b65ba398ccaf_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:36742ce39ffd92b07cf02a7f51ade042862320d4b0beee09f6f0a71a23d1e724_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:0813ad39035209eac48727d10da0770d5d0e0fe94f84ed8ed0a7cb946fd5085a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:69a9234a530751f1e7e34bfb21a8a79b7e3db6a7902722486f72b85bfc7b8cc3_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:7c561f6ea0662b5a7bde51ff65019c128b65bfefe3f1388e23669a6ffd130c9f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:f635ba63420aca986bd1f6a057b778c49957f26342df18849ff4b99fd318ac9f_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1af5b63614997f6be796b2774d2031ebc3404d68440460f0edd9ecb7024e5a8d_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:54790ceaf3aa3bf15641c4ce1a0b8a5c0bea597e15e240cdf1c2d3715cd819e8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae2bb75f3c8e3c42cb22622114c63a67fc98a844bf10b313afed13afa7b3297d_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ee7c050cbd350c8ed01594fd3c7662c361b16a23ad6ef54ad1aefae7788729a8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bbe422b9d9e942072164a42c4ab57053867bc62cba0ddf53f7e7eac56ef53cd7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:ce9658374396ecd1c9921e4ec4bd33eede25bb83568e0b401b6f9d1a053f58e4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f0a4742ef2ba98180910b76006c356e77325d8f12741459db4f065835aad2d2a_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes For Red Hat OpenShift Logging 6.0, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)