- Issued:
- 2026-09-21
- Updated:
- 2026-09-21
RHSA-2026:69255 - Security Advisory
Synopsis
Red Hat Quay 3.16.6
Type/Severity
Security Advisory: Important
Topic
Red Hat Quay 3.16.6 is now available with bug fixes.
Description
Quay 3.16.6
Solution
Before applying this update, make sure all previously released errata relevant
to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Quay
Fixes
- PROJQUAY-13135 - [redhat-3.16] cherrypick: Excessive DNS query bursts from Quay v3.18 causing local resolver saturation
- PROJQUAY-12801 - [redhat-3.16] cherry-pick: Clean up orphaned multipart uploads as part of blob cleanup work
- PROJQUAY-12410 - V2 UI routing bug: malformed API requests when organization name contains the "organization" word
- PROJQUAY-11682 - Autopruner matching on .sig tags instead of filtering them
CVEs
- CVE-2026-13149
- CVE-2026-15792
- CVE-2026-15927
- CVE-2026-16221
- CVE-2026-18255
- CVE-2026-32283
- CVE-2026-33818
- CVE-2026-39822
- CVE-2026-44705
- CVE-2026-49477
- CVE-2026-54058
- CVE-2026-54060
- CVE-2026-54770
- CVE-2026-55379
- CVE-2026-55380
- CVE-2026-56852
- CVE-2026-56853
- CVE-2026-56858
- CVE-2026-56859
- CVE-2026-56860
- CVE-2026-56862
- CVE-2026-57231
- CVE-2026-59197
- CVE-2026-59199
- CVE-2026-59200
- CVE-2026-59204
- CVE-2026-59205
- CVE-2026-59869
- CVE-2026-59879
- CVE-2026-59885
- CVE-2026-59886
- CVE-2026-67213
- CVE-2026-67214
- CVE-2026-67313
- CVE-2026-67314
- CVE-2026-67320
- CVE-2026-67321
- CVE-2026-69152
- CVE-2026-73086
- CVE-2026-75593
- CVE-2026-82417
- CVE-2026-84375
amd64
| registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:056eaee2e613a95da856a57959825cd41661c671059d8799241712bd0f075888 |
| registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:99718b05907e628bd999499a10b856018d135a3445921916ba9c3749a068220a |
| registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d8b5fa9e65c6812893e4030225fd24ccde1f84db62a058a1702260a6fa976a50 |
| registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:4bacacab1b96616a5e3b036ab87945cbbdad9554425cb6f342bdf1b58a4b2eca |
| registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:a6794c937636ee68c8ab53d8fa25556b9039c2ea8da6b166814478b6e329b0e1 |
| registry.redhat.io/quay/quay-builder-rhel9@sha256:b9ffed2aa8e2041cfb161d8d55c415557bbbcc40b5e76735b01e19acc6f3c850 |
| registry.redhat.io/quay/clair-rhel9@sha256:65aad515df0362df61615bb2daabc49dd4344326e3b1e910dfa58c4657e5d005 |
| registry.redhat.io/quay/quay-operator-bundle@sha256:39d5a52886d609e675d952784c8f609490ff3f69021f35db7831f6fc9449a573 |
| registry.redhat.io/quay/quay-operator-rhel9@sha256:fda11b769a92decfe88ca767ae65586853a5511f221eef92b369017d5284e389 |
| registry.redhat.io/quay/quay-rhel9@sha256:c01fdefc968c09f162f5d828afef1a659d7af87f34c42170b0ccaea461ba15e9 |
ppc64le
| registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:d2d01db4c955deb5d0704fdb7c4ef9660719bd0f4dd18d0d64f3c788e8836b5f |
| registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:246ca687bc07336a7a1f6bd679c61c8854f5ffbcd5ed76a770bc37810b98b744 |
| registry.redhat.io/quay/quay-builder-rhel9@sha256:dfbbf0638eb70bd2641cbd1c3d3757c043c1a9780ed5f4c9c109f4bc6293ad67 |
| registry.redhat.io/quay/clair-rhel9@sha256:fae9bf8bb9619ab76eb8b02f0db54f76dcee4d5d8e3cdfc18e4a1eb6ea53ef00 |
| registry.redhat.io/quay/quay-operator-rhel9@sha256:98c82825cc0375337fcec210f188eef5d69e44aa676b95404326f9ac3937231a |
| registry.redhat.io/quay/quay-rhel9@sha256:deee305468e059e9d0e085cdfd5f54041d7a29df675e81b76da41896e55908d9 |
s390x
| registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:159316f0ad9942ee00f49625e9f55ed1e2e1ceacc6b07062851b53e803d2712a |
| registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:71970193f2dbda6d3f39c914e60b2bcf17945d8409f45e0acff56b7e29799815 |
| registry.redhat.io/quay/quay-builder-rhel9@sha256:543cf73accd633a8b86005b83220b3ab249611e433a795d34afb0c891c25bf89 |
| registry.redhat.io/quay/clair-rhel9@sha256:774609746a94c01ac0c321fb37d6397e9e36472b1a2c74686a6f8f6beff69ca8 |
| registry.redhat.io/quay/quay-operator-rhel9@sha256:6a5d5f62bd0b0cfe8330e5d685c8e722176e3f254bbe0fad4a1ace064d57700a |
| registry.redhat.io/quay/quay-rhel9@sha256:98016f1125ba118b02aea3467d44f9f71b8dc3f090cfbece5507d51590e08084 |
arm64
| registry.redhat.io/quay/quay-rhel9@sha256:87d9fe47faea904645aa6ec202f28765fa9a710d3dfe3ccfeb3ca46b5a5d5d67 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
