Improper Certificate Validation in Traefik - CVE-2025-68121

Vulnerability identifier: #VU123129

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-68121

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation within HTTP/3 connections. A remote attacker can cause cause a client to resume a session with a server that it would not have resumed with during the initial handshake

Traefik
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Business Automation Workflow
Splunk Operator for Kubernetes Add-on
App Connect Enterprise Certified Container
Red Hat OpenStack
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Development Tools Module
openSUSE Leap
openEuler
SecurityCenter
Go programming language
Data Virtualization (DV) on Cloud Pak for Data (CPD)
Guardium Data Security Center (GDSC)
DataStage on Cloud Pak for Data
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
toolbox
toolbox-tests
collectd-sensubility (Red Hat package)
rhc (Red Hat package)
rhc-worker-playbook (Red Hat package)
udica
yggdrasil (Red Hat package)
python-pyasn1 (Red Hat package)
gvisor-tap-vsock (Red Hat package)
openstack-selinux (Red Hat package)
golang-github-openprinting-ipp-usb (Red Hat package)
butane (Red Hat package)
opentelemetry-collector (Red Hat package)
ansible-collection-ansible-posix (Red Hat package)
containernetworking-plugins (Red Hat package)
slirp4netns
runc (Red Hat package)
runc
oci-seccomp-bpf-hook
containernetworking-plugins
python-cinder-tests-tempest (Red Hat package)
ansible-collections-openstack (Red Hat package)
skopeo (Red Hat package)
python-ovsdbapp (Red Hat package)
aardvark-dns
netavark
fuse-overlayfs
crun
skopeo
skopeo-tests
golang
golang-devel
golang-help
skopeo-doc
golang-bin
golang-shared
golang-docs
golang-misc
golang-src
golang-tests
go1.24-openssl-race
go1.24-openssl
go1.24-openssl-doc
go1.24-race
go1.24
go1.24-doc
go1.24-openssl-debuginfo
cri-tools (Red Hat package)
delve
delve (Red Hat package)
cri-o (Red Hat package)
golang (Red Hat package)
golang-race
go-toolset
go1.25-openssl-race
go1.25-openssl-doc
go1.25-openssl
go1.25-openssl-debuginfo
go1.25-race
go1.25
go1.25-doc
buildah (Red Hat package)
buildah-tests
buildah
containers-common
conmon
python-glance-store (Red Hat package)
ignition (Red Hat package)
openstack-swift (Red Hat package)
container-selinux
tripleo-ansible (Red Hat package)
git-lfs
git-lfs-doc
etcd (Red Hat package)
git-lfs (Red Hat package)
python3-criu
crit
criu
criu-devel
criu-libs
python-oslo-serialization (Red Hat package)
python-os-brick (Red Hat package)
libslirp
libslirp-devel
podman (Red Hat package)
python3-podman
podman-tests
podman
podman-catatonit
podman-gvproxy
podman-docker
podman-plugins
podman-remote
openshift (Red Hat package)
openshift-clients (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
grafana-pcp (Red Hat package)
grafana-pcp
kernel (Red Hat package)
kernel-rt (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
grafana (Red Hat package)
grafana-selinux
grafana
puppet-rabbitmq (Red Hat package)
python-oslo-messaging (Red Hat package)
os-net-config (Red Hat package)
puppet-tripleo (Red Hat package)
openstack-tripleo-heat-templates (Red Hat package)
openstack-heat (Red Hat package)
openstack-ironic (Red Hat package)
rhosp-director-images-uefi-x86_64 (Red Hat package)
rhosp-director-images-fips-x86_64 (Red Hat package)
rhosp-director-images-ipa-fips-x86_64 (Red Hat package)
rhosp-director-images-ipa-x86_64 (Red Hat package)
octavia-amphora-image-x86_64 (Red Hat package)
octavia-amphora-image-fips-x86_64 (Red Hat package)
rhosp-director-images-minimal (Red Hat package)
rhosp-director-images (Red Hat package)
rhosp-director-images-minimal-fips (Red Hat package)
rhosp-director-images-multirhel-x86_64 (Red Hat package)
rhosp-director-images-uefi-fips-x86_64 (Red Hat package)
rhosp-director-images-x86_64 (Red Hat package)
openstack-cinder (Red Hat package)
openstack-neutron (Red Hat package)
openstack-keystone (Red Hat package)
python-django-horizon (Red Hat package)
openstack-nova (Red Hat package)
erlang (Red Hat package)
image-builder (Red Hat package)
osbuild-composer (Red Hat package)
cockpit-podman
osbuild-composer-worker
osbuild-composer-core
osbuild-composer
Splunk Enterprise
Oracle TimesTen In-Memory Database
Red Hat OpenShift Container Platform

Install updates from vendor's website.

Traefik - addressed in versions 2.11.37, 3.6.8
SecurityCenter - update to SC202607.2
Go programming language - addressed in versions 1.24.13, 1.25.7
Guardium Data Security Center (GDSC) - update to 3.8.8
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 2
Splunk Enterprise - addressed in versions 9.3.12, 9.4.11, 10.0.6, 10.2.3
IBM Business Automation Workflow - addressed in versions 24.0.0-IF009, 24.0.1-IF008, 25.0.0-IF005, 26.0.0.0
toolbox - update to 0.0.99.5.1-1.0.1
toolbox-tests - update to 0.0.99.5.1-1.0.1
collectd-sensubility (Red Hat package) - update to 0.2.1-6.el9ost
rhc (Red Hat package) - addressed in versions 0.2.2-1.el9_2.3, 0.2.4-8.el9_4, 0.2.5-4.el8_10, 0.3.2-2.el10_0, 0.3.4-2.el10_1
rhc-worker-playbook (Red Hat package) - addressed in versions 0.2.3-3.el10_0, 0.2.3-3.el10_1
udica - update to 0.2.6-21
yggdrasil (Red Hat package) - addressed in versions 0.4.7-2.el10_0, 0.4.8-3.el10_1
python-pyasn1 (Red Hat package) - update to 0.5.1-4.el9
gvisor-tap-vsock (Red Hat package) - addressed in versions 0.7.3-5.el9_4.3, 0.8.5-2.el9_6.1, 0.8.5-2.el10_0.1
openstack-selinux (Red Hat package) - update to 0.8.37-17.1.20260107141051.05dd1b2.el9ost
golang-github-openprinting-ipp-usb (Red Hat package) - update to 0.9.27-5.el10_1
butane (Red Hat package) - addressed in versions 0.19.0-5.rhaos4.14.el8, 0.20.0-6.rhaos4.15.el8, 0.21.0-6.rhaos4.16.el8
opentelemetry-collector (Red Hat package) - addressed in versions 0.144.0-1.el9_4, 0.144.0-1.el9_6, 0.144.0-1.el9_7, 0.144.0-1.el10_0, 0.144.0-1.el10_1
ansible-collection-ansible-posix (Red Hat package) - update to 1.2.0-1.4.el9ost
containernetworking-plugins (Red Hat package) - addressed in versions 1.2.0-3.el9_2.3, 1.4.0-6.rhaos4.14.el8, 1.4.0-6.rhaos4.15.el8, 1.4.0-7.rhaos4.12.el8, 1.4.0-7.rhaos4.13.el8, 1.4.0-7.rhaos4.14.el8, 1.4.0-7.rhaos4.15.el8, 1.4.0-10.rhaos4.16.el8, 1.6.2-3.el9_6
slirp4netns - update to 1.2.3-1
runc (Red Hat package) - addressed in versions 1.2.5-5.rhaos4.19.el9, 1.2.9-1.el9_2.2, 1.2.9-1.el9_4.1, 1.2.9-3.el9_6, 1.2.9-5.rhaos4.16.el8, 1.2.9-5.rhaos4.16.el9, 1.2.9-5.rhaos4.18.el9, 1.4.0-2.el9_7
runc - update to 1.2.9-4
oci-seccomp-bpf-hook - update to 1.2.10-1
containernetworking-plugins - update to 1.4.0-8.0.1
python-cinder-tests-tempest (Red Hat package) - update to 1.8.0-17.1.20260114160833.0e94611.el9ost
ansible-collections-openstack (Red Hat package) - update to 1.9.1-17.1.20260318160829.0e9a6f2.el9ost
skopeo (Red Hat package) - addressed in versions 1.9.4-9.rhaos4.12.el8, 1.9.4-10.rhaos4.12.el9, 1.11.3-6.rhaos4.13.el8, 1.11.3-6.rhaos4.13.el9, 1.11.3-7.rhaos4.14.el8, 1.11.3-7.rhaos4.14.el9, 1.11.3-8.rhaos4.14.el8, 1.11.3-8.rhaos4.14.el9, 1.11.3-8.rhaos4.15.el8, 1.11.3-9.rhaos4.15.el8, 1.11.3-9.rhaos4.15.el9, 1.11.3-10.rhaos4.15.el9, 1.11.4-0.1.el9_2.6, 1.14.5-2.el9_4.4, 1.14.5-8.rhaos4.16.el8, 1.14.5-8.rhaos4.16.el9, 1.16.1-5.rhaos4.18.el9, 1.18.1-3.el10_0.1, 1.18.1-5.el9_6, 1.18.1-5.rhaos4.19.el9, 1.20.0-3.el10_1
python-ovsdbapp (Red Hat package) - update to 1.9.4-17.1.20260304101059.65d02f0.el9ost
aardvark-dns - update to 1.10.1-2.0.1
netavark - update to 1.10.3-1.0.1
fuse-overlayfs - update to 1.13-1.0.1
crun - update to 1.14.3-2
skopeo - addressed in versions 1.14.5-7, 1.17.0-4
skopeo-tests - addressed in versions 1.14.5-7, 1.17.0-4
golang - addressed in versions 1.15.7-59, 1.17.3-47, 1.21.4-42, 1.21.4-43, 1.21.4-45
golang-devel - addressed in versions 1.15.7-59, 1.17.3-47, 1.21.4-42, 1.21.4-43, 1.21.4-45
golang-help - addressed in versions 1.15.7-59, 1.17.3-47, 1.21.4-42, 1.21.4-43, 1.21.4-45
skopeo-doc - update to 1.17.0-4
golang - addressed in versions 1.24.13-1, 1.25.7-1.0.1
golang-bin - addressed in versions 1.24.13-1, 1.25.7-1.0.1
golang-shared - update to 1.24.13-1
golang-docs - addressed in versions 1.24.13-1, 1.25.7-1.0.1
golang-misc - addressed in versions 1.24.13-1, 1.25.7-1.0.1
golang-src - addressed in versions 1.24.13-1, 1.25.7-1.0.1
golang-tests - addressed in versions 1.24.13-1, 1.25.7-1.0.1
go1.24-openssl-race - addressed in versions 1.24.13-150000.1.23.1, 1.24.13-150600.13.18.1
go1.24-openssl - addressed in versions 1.24.13-150000.1.23.1, 1.24.13-150600.13.18.1
go1.24-openssl-doc - addressed in versions 1.24.13-150000.1.23.1, 1.24.13-150600.13.18.1
go1.24-race - update to 1.24.13-150000.1.56.1
go1.24 - update to 1.24.13-150000.1.56.1
go1.24-doc - update to 1.24.13-150000.1.56.1
go1.24-openssl-debuginfo - update to 1.24.13-150600.13.18.1
cri-tools (Red Hat package) - addressed in versions 1.25.0-6.el9, 1.25.0-7.el8, 1.27.0-8.el8, 1.27.0-8.el9, 1.28.0-9.el8, 1.28.0-9.el9, 1.29.0-8.el8, 1.29.0-8.el9
delve - update to 1.25.2-1.0.2
delve (Red Hat package) - addressed in versions 1.25.2-2.el10_0, 1.25.2-2.el10_1
cri-o (Red Hat package) - addressed in versions 1.25.5-34.rhaos4.12.git6120b13.el8, 1.27.8-19.rhaos4.14.gitcea2db1.el8, 1.27.8-19.rhaos4.14.gitcea2db1.el9, 1.28.11-14.rhaos4.15.gitf722b2f.el8, 1.28.11-14.rhaos4.15.gitf722b2f.el9, 1.29.13-12.rhaos4.16.git979a5e6.el8, 1.29.13-12.rhaos4.16.git979a5e6.el9
golang (Red Hat package) - addressed in versions 1.25.7-1.el9_6, 1.25.7-1.el9_7, 1.25.7-1.el10_0, 1.25.7-1.el10_1, 1.25.9-1.el9_2
golang-race - update to 1.25.7-1.0.1
go-toolset - update to 1.25.7-1.0.1
go1.25-openssl-race - addressed in versions 1.25.7-150000.1.15.1, 1.25.8-150000.1.18.1, 1.25.8-150600.13.15.1
go1.25-openssl-doc - addressed in versions 1.25.7-150000.1.15.1, 1.25.8-150000.1.18.1, 1.25.8-150600.13.15.1
go1.25-openssl - addressed in versions 1.25.7-150000.1.15.1, 1.25.8-150000.1.18.1, 1.25.8-150600.13.15.1
go1.25-openssl-debuginfo - addressed in versions 1.25.7-150000.1.15.1, 1.25.8-150000.1.18.1, 1.25.8-150600.13.15.1
go1.25-race - update to 1.25.7-150000.1.29.1
go1.25 - update to 1.25.7-150000.1.29.1
go1.25-doc - update to 1.25.7-150000.1.29.1
buildah (Red Hat package) - addressed in versions 1.26.11-1.el9_0, 1.29.7-1.el9_2.5, 1.39.6-2.el9_6, 1.39.8-1.el10_0, 1.41.8-2.el9_7, 1.41.8-2.el10_1
buildah-tests - update to 1.33.14-3
buildah - update to 1.33.14-3
containers-common - update to 1-82.0.1
conmon - update to 2.1.10-1
python-glance-store (Red Hat package) - update to 2.5.1-17.1.20260225150839.5f1cee6.el9ost
ignition (Red Hat package) - update to 2.18.0-8.rhaos4.16.el9
openstack-swift (Red Hat package) - update to 2.27.1-17.1.20260806131309.16dbcae.el9ost
container-selinux - update to 2.229.0-2
Splunk Operator for Kubernetes Add-on - update to 3.1.0
tripleo-ansible (Red Hat package) - update to 3.3.1-17.1.20260603190918.8debef3.el9ost
git-lfs - addressed in versions 3.4.1-8.0.1, 3.7.1-3
git-lfs-doc - addressed in versions 3.4.1-8.0.1, 3.7.1-3
etcd (Red Hat package) - addressed in versions 3.4.26-9.5.el9ost, 3.4.26-9.6.el9ost
git-lfs (Red Hat package) - addressed in versions 3.6.1-2.el9_6.2, 3.6.1-2.el10_0.2, 3.6.1-7.el9_7, 3.6.1-7.el10_1
python3-criu - update to 3.18-5.0.1
crit - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
criu-devel - update to 3.18-5.0.1
criu-libs - update to 3.18-5.0.1
python-oslo-serialization (Red Hat package) - update to 4.1.1-17.1.20260326121047.bbe5d5a.el9ost
python-os-brick (Red Hat package) - update to 4.3.4-17.1.20260324150947.cf69f92.el9ost
libslirp - update to 4.4.0-2
libslirp-devel - update to 4.4.0-2
podman (Red Hat package) - addressed in versions 4.4.1-19.rhaos4.13.el8, 4.4.1-20.rhaos4.13.el9, 4.4.1-22.el9_2.11, 4.4.1-25.rhaos4.14.el8, 4.4.1-25.rhaos4.14.el9, 4.4.1-39.rhaos4.15.el8, 4.9.4-20.el9_4.2, 5.2.2-11.rhaos4.18.el8, 5.4.0-15.el10_0.1, 5.4.0-20.el9_6.2, 5.6.0-12.el10_1, 5.6.0-14.el9_7
python3-podman - update to 4.9.0-3
podman-tests - update to 4.9.4-30.0.1
podman - update to 4.9.4-30.0.1
podman-catatonit - update to 4.9.4-30.0.1
podman-gvproxy - update to 4.9.4-30.0.1
podman-docker - update to 4.9.4-30.0.1
podman-plugins - update to 4.9.4-30.0.1
podman-remote - update to 4.9.4-30.0.1
openshift (Red Hat package) - addressed in versions 4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8, 4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el9, 4.14.0-202608131802.p2.g288be6b.assembly.stream.el8, 4.14.0-202608131802.p2.g288be6b.assembly.stream.el9, 4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8, 4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el9, 4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8, 4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el9, 4.19.0-202603122218.p2.ga674efa.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202608131627.p2.gd691257.assembly.stream.el8, 4.12.0-202608131627.p2.gd691257.assembly.stream.el9, 4.14.0-202608131802.p2.g44b3ac2.assembly.stream.el8, 4.14.0-202608131802.p2.g44b3ac2.assembly.stream.el9, 4.15.0-202608131733.p2.g8231637.assembly.stream.el8, 4.15.0-202608131733.p2.g8231637.assembly.stream.el9, 4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8, 4.16.0-202608111505.p2.g6f88b58.assembly.stream.el9, 4.19.0-202603132148.p2.gb2a93a6.assembly.stream.el8, 4.19.0-202603132148.p2.gb2a93a6.assembly.stream.el9
Red Hat OpenShift Container Platform - addressed in versions 4.12.97, 4.13.68, 4.14.68, 4.14.72, 4.15.66, 4.15.68, 4.16.69, 4.18.37, 4.18.42, 4.19.27
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.14.0-202606041348.p2.g9a7820e.assembly.stream.el8, 4.14.0-202606041348.p2.g9a7820e.assembly.stream.el9, 4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8, 4.14.0-202608131802.p2.g9a7820e.assembly.stream.el9, 4.15.0-202606040938.p2.gfd77d92.assembly.stream.el8, 4.15.0-202606040938.p2.gfd77d92.assembly.stream.el9, 4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8, 4.15.0-202608131733.p2.gfd77d92.assembly.stream.el9, 4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8, 4.16.0-202608111505.p2.ga53e9de.assembly.stream.el9
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202606040938.p2.g0d799a2.assembly.stream.el8, 4.15.0-202606040938.p2.g0d799a2.assembly.stream.el9, 4.15.0-202608131733.p2.g5638728.assembly.stream.el8, 4.15.0-202608131733.p2.g5638728.assembly.stream.el9, 4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8, 4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el9
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202606040938.p2.gfc50272.assembly.stream.el8, 4.15.0-202606040938.p2.gfc50272.assembly.stream.el9, 4.15.0-202608131733.p2.gfc50272.assembly.stream.el8, 4.15.0-202608131733.p2.gfc50272.assembly.stream.el9, 4.16.0-202608111505.p2.g26b43df.assembly.stream.el8, 4.16.0-202608111505.p2.g26b43df.assembly.stream.el9
grafana-pcp (Red Hat package) - addressed in versions 5.1.1-5.el9_2.1, 5.1.1-12.el8_10, 5.2.2-4.el10_0, 5.3.0-2.el10_1
grafana-pcp - update to 5.1.1-12
kernel (Red Hat package) - addressed in versions 5.14.0-284.188.1.el9_2, 5.14.0-570.103.1.el9_6
kernel-rt (Red Hat package) - update to 5.14.0-284.188.1.rt14.473.el9_2
openstack-ironic-python-agent (Red Hat package) - update to 7.1.1-17.1.20260803104219.0211fa9.el9ost
grafana (Red Hat package) - addressed in versions 9.0.9-12.el9_2, 9.2.10-27.el9_4, 9.2.10-28.el8_10, 10.2.6-18.el9_6, 10.2.6-18.el9_7, 10.2.6-21.el10_0, 10.2.6-22.el10_1
grafana-selinux - update to 9.2.10-28.0.1
grafana - update to 9.2.10-28.0.1
puppet-rabbitmq (Red Hat package) - update to 11.0.1-17.1.20260306080955.63fee2c.el9ost
App Connect Enterprise Certified Container - addressed in versions 12.0.22, 13.0.0
python-oslo-messaging (Red Hat package) - update to 12.7.3-17.1.20260701150916.5d6fd1a.el9ost
os-net-config (Red Hat package) - update to 14.2.1-17.1.20260803103231.61d7bd7.el9ost
puppet-tripleo (Red Hat package) - update to 14.2.3-17.1.20260206090839.40278e1.el9ost
openstack-tripleo-heat-templates (Red Hat package) - update to 14.3.1-17.1.20260803105013.e7c7ce3.el9ost
openstack-heat (Red Hat package) - update to 16.1.1-17.1.20260713101101.edc6d60.el9ost
Red Hat OpenStack - update to 17.1
openstack-ironic (Red Hat package) - update to 17.1.1-17.1.20260721220909.c31db88.el9ost
rhosp-director-images-uefi-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-fips-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-ipa-fips-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-ipa-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
octavia-amphora-image-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
octavia-amphora-image-fips-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-minimal (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-minimal-fips (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-multirhel-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-uefi-fips-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
rhosp-director-images-x86_64 (Red Hat package) - update to 17.1-20260901.1.el9ost
openstack-cinder (Red Hat package) - update to 18.2.2-17.1.20260702111621.f6b44fc.el9ost
openstack-neutron (Red Hat package) - update to 18.6.1-17.1.20260810120959.85ff760.el9ost
openstack-keystone (Red Hat package) - update to 19.0.2-17.1.20260630150819.54dd95d.el9ost
python-django-horizon (Red Hat package) - update to 19.4.1-17.1.20260630130603.9b1a13e.el9ost
openstack-nova (Red Hat package) - update to 23.2.3-17.1.20260810140853.2ace99d.el9ost
erlang (Red Hat package) - update to 24.3.4.2-7.el9ost
image-builder (Red Hat package) - addressed in versions 31-3.el9_7, 31-4.el10_1, 52.1-1.el10_2
osbuild-composer (Red Hat package) - addressed in versions 76.1-6.el9_2, 101.4-4.el8_10, 132.2-6.el9_6, 134.1-6.el10_0, 149-4.el9_7, 149-5.el10_1
cockpit-podman - update to 84.1-1
osbuild-composer-worker - update to 149-4
osbuild-composer-core - update to 149-4
osbuild-composer - update to 149-4

• https://github.com/traefik/traefik/security/advisories/GHSA-gv8r-9rw9-9697

• Multiple vulnerabilities in Traefik
• Multiple vulnerabilities in Go programming language
• SUSE update for go1.25
• SUSE update for go1.25-openssl
• Red Hat Enterprise Linux 10 update for golang
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Enterprise Linux 10 update for grafana
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 10 update for grafana-pcp
• Red Hat Enterprise Linux 10 update for golang-github-openprinting-ipp-usb
• Red Hat Enterprise Linux 8 update for grafana-pcp
• Red Hat Enterprise Linux 8 update for grafana
• Red Hat Enterprise Linux 10 update for golang
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Enterprise Linux 9 update for runc
• Red Hat Enterprise Linux 10 update for buildah
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 10 update for podman
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 10 update for skopeo
• Red Hat Enterprise Linux 10 update for yggdrasil
• Red Hat Enterprise Linux 10 update for osbuild-composer
• Red Hat Enterprise Linux 9 update for osbuild-composer
• Red Hat Enterprise Linux 10 update for grafana-pcp
• Red Hat Enterprise Linux 10 update for grafana
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for image-builder
• Red Hat Enterprise Linux 10 update for image-builder
• Red Hat Enterprise Linux 10 update for delve
• Red Hat Enterprise Linux 10 update for delve
• Red Hat Enterprise Linux 8 update for osbuild-composer
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Enterprise Linux 10 update for rhc-worker-playbook
• Red Hat Enterprise Linux 10 update for rhc-worker-playbook
• Red Hat Enterprise Linux 10 update for git-lfs
• Red Hat Enterprise Linux 10 update for git-lfs
• Red Hat Enterprise Linux 10 update for opentelemetry-collector
• Red Hat Enterprise Linux 9 update for opentelemetry-collector
• Red Hat Enterprise Linux 10 update for opentelemetry-collector
• Red Hat Enterprise Linux 9 update for opentelemetry-collector
• Red Hat Enterprise Linux 9 update for opentelemetry-collector
• SUSE update for go1.24
• SUSE update for go1
• SUSE update for go1.24-openssl
• Anolis OS update for grafana-pcp
• Anolis OS update for grafana
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for git-lfs
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 10 update for rhc
• Red Hat Enterprise Linux 10 update for rhc
• Red Hat Enterprise Linux 8 update for rhc
• Red Hat Enterprise Linux 10 update for yggdrasil
• Anolis OS update for container-tools:an8 module
• openEuler 24.03 LTS SP1 update for golang
• openEuler 24.03 LTS update for golang
• openEuler 22.03 LTS SP4 update for golang
• openEuler 20.03 LTS SP4 update for golang
• openEuler 24.03 LTS SP3 update for golang
• openEuler 24.03 LTS SP2 update for golang
• SUSE update for go1.25-openssl
• SUSE update for go1.25-openssl
• IBM DataStage on Cloud Pak for Data update for crypto/tls
• Anolis OS update for golang
• Anolis OS update for git-lfs
• Anolis OS update for skopeo
• Anolis OS update for osbuild-composer
• IBM App Connect Enterprise Certified Container update for crypto/tls
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19 packages
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Improper Certificate Validation in Red Hat OpenShift Container Platform 4.18 packages
• Red Hat Enterprise Linux 9 update for podman
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Splunk Operator for Kubernetes Add-on update for third-party components
• Red Hat Enterprise Linux 9 update for runc
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for gvisor-tap-vsock
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Improper Certificate Validation in Oracle TimesTen In-Memory Database
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for runc
• Red Hat Enterprise Linux 9 update for gvisor-tap-vsock
• IBM Data Virtualization on Cloud Pak for Data update for crypto/tls
• Red Hat Enterprise Linux 10 update for buildah
• Red Hat Enterprise Linux 10 update for skopeo
• Red Hat Enterprise Linux 10 update for podman
• Red Hat Enterprise Linux 10 update for osbuild-composer
• Red Hat Enterprise Linux 9 update for osbuild-composer
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18 packages
• Splunk Enterprise update for third-party components (May 2026)
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 9 update for runc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13 packages
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 10 update for gvisor-tap-vsock
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 10 update for image-builder
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Enterprise Linux 9 update for grafana-pcp
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for osbuild-composer
• Red Hat Enterprise Linux 9 update for rhc
• Red Hat Enterprise Linux 9 update for rhc
• Tenable Security Center on Enclave Security update for third-party components
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12 packages
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages