RHSA-2026:2852 - Security Advisory

Topic

An updated OpenShift Security Profiles Operator image that fixes various bugs and adds new
enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.

Description

The Security Profiles Operator v0.10.0 is now available.
See the documentation for release information:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/security-profiles-operator

Solution

Before applying this update, make sure all previously released errata relevant to your
system have been applied. For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

• OpenShift Security Profiles Operator

Fixes

• CMP-4033 - The spod pods failed to start with RHCOS 10 image
• CMP-4007 - The spod pods failed to get running due to "fsmount:fscontext:proc/: could not get mount id: operation not permitted"
• CMP-3537 - The workload failed to create due to "container create failed: write to `/proc/self/attr/keycreate`: Invalid argument" after the profilerecording created

CVEs

• CVE-2025-66506
• CVE-2025-66564

References

• https://access.redhat.com/security/updates/classification/