RHSA-2026:1942 - Security Advisory

Topic

Red Hat Quay 3.15.3 is now available with bug fixes.

Description

Quay 3.15.3

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Fixes

• PROJQUAY-9677 - New UI lost Organizations page content after idle some time
• PROJQUAY-9646 - [3.15] Issue with Email Notifications for Repository Names Containing Slashes ("/") in Quay
• PROJQUAY-9525 - Quay new UI can't display the customized "Registry Title" on the name of Browser Tab
• PROJQUAY-9522 - [3.15][Pre-merge]: Quay new UI login page can't show the customized "REGISTRY_TITLE"
• PROJQUAY-9513 - [3.15] Quay 3.15.1 new UI should refresh the Organizations page automatically after create new organization
• PROJQUAY-9512 - [3.15] Quay new UI can't update the description of Team
• PROJQUAY-9460 - Total Registry Size Calculation return 0 KB and always queued
• PROJQUAY-9299 - [3.15] Update downstream to use latest Clair version
• PROJQUAY-9272 - New UI: Regex search drop down not working
• PROJQUAY-9012 - Cannot use proxy cache for ghcr.io

CVEs

• CVE-2024-34156
• CVE-2025-12816
• CVE-2025-15284
• CVE-2025-47907
• CVE-2025-47913
• CVE-2025-52881
• CVE-2025-58183
• CVE-2025-58754
• CVE-2025-59420
• CVE-2025-61729
• CVE-2025-65945
• CVE-2025-66418
• CVE-2025-66471
• CVE-2025-66506
• CVE-2026-21441
• CVE-2026-24049

References

• https://access.redhat.com/security/updates/classification/