RHSA-2026:57914: Important: Red Hat build of MicroShift 4.18.54 security update
Important: Red Hat build of MicroShift 4.18.54 security update
Other sources
Red Hat build of MicroShift is Red Hat's light-weight Kubernetesorchestration solution designed for edge device deployments and is builtfrom the edge capabilities of Red Hat OpenShift Container Platform.MicroShift is an application that is deployed on top of Red Hat EnterpriseLinux devices at the edge, providing an efficient way to operatesingle-node clusters in these low-resource environments.This advisory contains the RPM packages for Red Hat build of MicroShift4.18.54. Read the following advisory for the container images for thisrelease:https://access.redhat.com/errata/RHSA-2026:57487 Security Fix(es): net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)All Red Hat build of MicroShift 4.18 users are advised to use these updatedpackages and images when they are available in the RPM repository.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/microshiftto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-gateway-apito a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-gateway-api-release-infoto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-greenbootto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-low-latencyto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-multusto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-multus-release-infoto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-networkingto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-olmto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-olm-release-infoto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-release-infoto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshift-selinuxto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 - Upgrade
Upgrade
redhat/microshiftto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9.aa - Upgrade
Upgrade
redhat/microshift-gateway-apito a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9.aa - Upgrade
Upgrade
redhat/microshift-multusto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9.aa - Upgrade
Upgrade
redhat/microshift-networkingto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9.aa - Upgrade
Upgrade
redhat/microshift-olmto a version that resolves this vulnerability.Fixed in 4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9.aa - Upgrade
Upgrade
MicroShiftto a version that resolves this vulnerability.Fixed in 4.18.54 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch RHSA-2026:57487