RHSA-2026:74025 - Security Advisory

Topic

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new
enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.

Description

The OpenShift File Integrity Operator v1.5.0 is now available.
See the documentation for bug fix information:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/file-integrity-operator

Solution

Before applying this update, make sure all previously released errata relevant to your
system have been applied. For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

• OpenShift File Integrity Operator - FIO

Fixes

• CMP-4728 - Extend the FileIntegrity CRD schema to support pod template labels and annotations
• CMP-4714 - Create dynamic NetworkPolicies for FIO operand pods
• CMP-4638 - [FIO] Central TLS Profile consistency
• CMP-4573 - [FIO] Switch File Integrity Operator base image to ubi9-minimal-pqc

CVEs

• CVE-2026-56853
• CVE-2026-56858
• CVE-2026-56859
• CVE-2026-56860
• CVE-2026-56862

References

• https://access.redhat.com/security/updates/classification/