RHEA-2026:2581 - Product Enhancement Advisory

Topic

Red Hat 3scale API Management 2.16.2 Release - Container Images

Description

Release of 3scale API Management components provides these changes:

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_3scale_api_management/2.14/html-single/installing_3scale/index

Affected Products

• Red Hat 3scale API Management Platform 2 for RHEL 8 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 8 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 8 ppc64le
• Red Hat 3scale API Management Platform 2 for RHEL 7 x86_64
• Red Hat 3scale API Management Platform 2 for RHEL 7 s390x
• Red Hat 3scale API Management Platform 2 for RHEL 7 ppc64le

Fixes

• THREESCALE-12042 - Add support for OCP 4.20
• THREESCALE-11824 - Deleting a Product CR in failed state does not delete the product configuration in system
• THREESCALE-11957 - FAPI policy uses wrong header
• THREESCALE-11014 - Applications being duplicated when 3scale Operator fails to reconcile Product
• THREESCALE-11062 - Add support for Sidekiq + Sentinels + Redis Logical DBs
• THREESCALE-11070 - Sidekiq: Extract Sentinels group name from the URL
• THREESCALE-9006 - CustomPolicyDefinition should work out of the box for tenants
• THREESCALE-9727 - backend object is not deleted when backend CR is deleted

CVEs

• CVE-2024-5642
• CVE-2025-4598
• CVE-2025-6069
• CVE-2025-6075
• CVE-2025-8291
• CVE-2025-9714
• CVE-2025-11083
• CVE-2025-38499
• CVE-2025-39966
• CVE-2025-40176
• CVE-2025-45582
• CVE-2025-47906
• CVE-2025-59375
• CVE-2025-61984
• CVE-2025-61985

References

(none)