RHSA-2026:63016 - Security Advisory

Topic

Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Red Hat Advanced Cluster Management for Kubernetes v2.17

Description

Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.

For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.

Solution

For release note details, see the upstream Submariner release notes:

https://submariner.io/community/releases/

Downstream-specific issues resolved:

• ACM-30182
• ACM-32385
• ACM-34578
• ACM-34651
• ACM-34693
• ACM-36281
• ACM-36898
• ACM-36899
• ACM-36907
• ACM-36909
• ACM-36910
• ACM-36911
• ACM-36912
• ACM-36927
• ACM-38289
• ACM-38295
• ACM-38315
• ACM-38320
• ACM-38322
• ACM-38330
• ACM-38357
• ACM-38360
• ACM-38447
• ACM-38448
• ACM-38449
• ACM-38450
• ACM-38451
• ACM-38452
• ACM-38453
• ACM-38466
• ACM-38494
• ACM-38495
• ACM-38496
• ACM-38497
• ACM-38499
• ACM-38500
• ACM-38513
• ACM-38515
• ACM-38519
• ACM-38520
• ACM-38533
• ACM-38538
• ACM-38542
• ACM-38546
• ACM-39374
• ACM-39382
• ACM-39384
• ACM-39385
• ACM-39510
• ACM-39511
• ACM-39568
• ACM-40464
• ACM-41039
• ACM-42640

For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:

https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/

Affected Products

• Red Hat Advanced Cluster Management for Kubernetes

Fixes

• ACM-30182 - Complete TLS Profile consistency work for Multicluster Networking
• ACM-34578 - Switch subctl install docs from CDN download to container image
• ACM-34651 - Submariner blocking ACM uninstallation
• ACM-34693 - Gateway node is not getting created on Azure OCP 4.22 while installing Submariner 0.24

CVEs

• CVE-2026-27136
• CVE-2026-27145
• CVE-2026-41178
• CVE-2026-42502
• CVE-2026-62309
• CVE-2026-66780
• CVE-2026-66781
• CVE-2026-66782
• CVE-2026-66783
• CVE-2026-66785
• CVE-2026-66786
• CVE-2026-66787
• CVE-2026-66788

References

• https://access.redhat.com/security/updates/classification/