RHSA-2026:95209: Updated Red Hat OpenStack Platform 17.1 director Operator container images
Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.The Red Hat OpenStack Platform (RHOSP) director Operator adds the ability to install and run a RHOSP cloud within OpenShift Container Platform (OCP).Security Fixes: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
Other sources
Updated Red Hat OpenStack Platform 17.1 director Operator container images
— Red Hat
Affected Software
Event History
Frequently Asked Questions
Which deployments should be prioritized for this update?
Prioritize Red Hat OpenStack Platform 17.1 environments that use the director Operator to install or run a RHOSP cloud within OpenShift Container Platform. The advisory specifically provides updated director Operator container images.
What type of attack is addressed by this update?
The fix addresses man-in-the-middle attacks involving untrusted intermediate certificates in crypto/x509. The provided information does not specify additional exploitation prerequisites, affected configurations, or mitigations other than using the updated container images.