RHSA-2026:95576: Release of containers for RHOSO 18.0.22
Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.Security Fixes: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat OpenStack Services on OpenShift (RHOSO)to a version that resolves this vulnerability.Fixed in 18.0.22