Linux · Security advisory · October 29, 2026

RHSA-2026:89229: Security update for 6 packages

RHSA-2026:89229, released October 29, 2026, fixes 1 CVE across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0040

33rd percentile

Fixed package versions

Product	Release	Fixed in
openshift	RHEL 10	4.21.0-202610221616.p2.g601ff80.assembly.stream.el10
openshift-clients	RHEL 10	4.21.0-202610221616.p2.gd0bf7cc.assembly.stream.el10
ose-aws-ecr-image-credential-provider	RHEL 10	4.21.0-202610221616.p2.gfdc7f3f.assembly.stream.el10
ose-azure-acr-image-credential-provider	RHEL 10	4.21.0-202610221616.p2.g53d73b1.assembly.stream.el10
ose-crio-credential-provider	RHEL 10	4.21.0-202610221616.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider	RHEL 10	4.21.0-202610221616.p2.gf064fc7.assembly.stream.el10

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-111943	Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509		8.1	0.0040	None reported

Also fixes CVE-2026-111943

SUSE-SU-2026:4866-1
go1.26-openssl on sles 15.6, sles 15.7
Go Programming Language 1.27.3
Go Programming Language
RHSA-2026:91646
osbuild-composer on RHEL 10
ALSA-2026:86196
go-toolset, golang, golang-bin and 5 more on almalinux 9
ALSA-2026:86093
go-toolset, golang, golang-bin and 5 more on almalinux 10
RHSA-2026:86196
go-toolset, golang, golang-bin and 5 more on RHEL 9
RHSA-2026:87040
golang on RHEL 10
RHSA-2026:86203
delve, go-toolset, golang and 6 more on RHEL 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:89229

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo