RHSA-2026:4215 - Security Advisory

Topic

Red Hat Quay 3.14.6 is now available with bug fixes.

Description

Quay 3.14.6

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11458

Fixes

• PROJQUAY-10212 - Move quay to python 3.12 (redhat-3.14)
• PROJQUAY-9832 - New UI: Regex search drop down not working[3.14]
• PROJQUAY-9525 - Quay new UI can't display the customized "Registry Title" on the name of Browser Tab
• PROJQUAY-9517 - [3.14] Quay 3.15.1 new UI should refresh the Organizations page automatically after create new organization
• PROJQUAY-9514 - [3.14] Quay new UI can't update the description of Team
• PROJQUAY-9468 - [3.14] Total Registry Size Calculation return 0 KB and always queued
• PROJQUAY-9461 - [Pre-merge]: Quay new UI login page can't show the customized "REGISTRY_TITLE"
• PROJQUAY-9423 - [3.14] Registry calculation not working if SUPER_USERS empty but LDAP_SUPERUSER_FILTER specified
• PROJQUAY-9413 - [3.14] OAuth Applications Information Tab
• PROJQUAY-9300 - [3.14] Update downstream to use latest Clair version

CVEs

• CVE-2022-30187
• CVE-2024-34156
• CVE-2024-47081
• CVE-2025-12816
• CVE-2025-15284
• CVE-2025-45768
• CVE-2025-47273
• CVE-2025-47913
• CVE-2025-50181
• CVE-2025-52881
• CVE-2025-58183
• CVE-2025-58754
• CVE-2025-59420
• CVE-2025-61729
• CVE-2025-61920
• CVE-2025-65945
• CVE-2025-66418
• CVE-2025-66471
• CVE-2025-66506
• CVE-2026-21441
• CVE-2026-24049

References

• https://access.redhat.com/security/updates/classification/