RHSA-2026:85227 - Security Advisory

Topic

Submariner v0.23 General Availability release images, which provide enhancements, security fixes, and updated container images.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Red Hat Advanced Cluster Management for Kubernetes v2.16

Description

Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.

For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.

Solution

For release note details, see the upstream Submariner release notes:

https://submariner.io/community/releases/

Downstream-specific issues resolved:

• ACM-34110
• ACM-34588
• ACM-28591
• ACM-34578
• ACM-40464
• ACM-38424
• ACM-38427
• ACM-38429
• ACM-38430
• ACM-38431
• ACM-38434
• ACM-38439
• ACM-38467
• ACM-38468
• ACM-38469
• ACM-38472
• ACM-38475
• ACM-38477
• ACM-38479
• ACM-38516
• ACM-38518
• ACM-38525
• ACM-38526
• ACM-38532
• ACM-38539
• ACM-38541
• ACM-38545
• ACM-47362
• ACM-38306
• ACM-38318
• ACM-38331
• ACM-38336
• ACM-38358
• ACM-38363
• ACM-38317
• ACM-38329
• ACM-38354
• ACM-38433
• ACM-38489
• ACM-38294
• ACM-38296
• ACM-38293

For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:

https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/

Affected Products

• Red Hat Advanced Cluster Management for Kubernetes

Fixes

• ACM-28591 - Submariner documentation : describe how users can choose which nodes will be gateways [need dev story attached]
• ACM-34578 - Switch subctl install docs from CDN download to container image

CVEs

• CVE-2026-32936
• CVE-2026-35579
• CVE-2026-63209
• CVE-2026-66780
• CVE-2026-66781
• CVE-2026-66782
• CVE-2026-66783
• CVE-2026-66785
• CVE-2026-66786
• CVE-2026-66787
• CVE-2026-66788

References

• https://access.redhat.com/security/updates/classification/