RHSA-2026:56347 - Security Advisory

Topic

A new version of Migration Toolkit for Applications (MTA) is now available.

Description

Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Affected Products

• Red Hat Migration Toolkit for Applications

Fixes

• BZ - 2378905
• BZ - 2387083
• BZ - 2407258
• BZ - 2418462
• BZ - 2460927
• BZ - 2477154
• BZ - 2477167
• BZ - 2480757
• BZ - 2480761
• BZ - 2500041
• BZ - 2500380
• MTA-5199 - Custom rule not fired for Administracion application
• MTA-7234 - [migtools/crane] 🐛 Transform command doesn't accept --overwrite flag
• MTA-7445 - Different rules / issues fired when running analysis from MTA HUB and IDE plugin using synced analysis profile
• MTA-7496 - Operator upgrade does not use external Keycloak instance when idp_primary is set to true

CVEs

• CVE-2025-47907
• CVE-2025-53547
• CVE-2025-58183
• CVE-2025-61729
• CVE-2026-25681
• CVE-2026-27136
• CVE-2026-44431
• CVE-2026-44432
• CVE-2026-59885
• CVE-2026-59886
• CVE-2026-8643

References

• https://access.redhat.com/security/updates/classification/
• https://developers.redhat.com/products/mta/overview
• https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/