Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:85980 - Security Advisory
Issued:
2026-10-20
Updated:
2026-10-20

RHSA-2026:85980 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat Quay

Type/Severity

Security Advisory: Important

Topic

A new version of Red Hat Quay is now available.

Description

Red Hat Quay

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Affected Products

  • Red Hat Quay

Fixes

  • BZ - 2544270
  • BZ - 2544283
  • PROJQUAY-13380 - RadosGWStorage using region_name is not properly validated at startup
  • PROJQUAY-13517 - Proxy cache fails for large blobs due to asynchronous download
  • PROJQUAY-13532 - Blob GET through storage proxy (FEATURE_PROXY_STORAGE) is gzip-encoded by nginx and loses Content-Length

CVEs

  • CVE-2026-102994
  • CVE-2026-102998

References

  • https://access.redhat.com/security/updates/classification/

amd64

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:eb681b6a847c8d853f86c4a3c673030362eb64b7831ebf8cd36880aa6d1cbcd5
registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:4be167821857bb0840cb3a4a084bf4f9d58c6769e90f716de97f790a5c8bc504
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:647c5331126cf6e49201e52e4abf98e98beaf3e35304b65d491de93a7984d4b9
registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:0e452d18d8c50e6ef46d4816dd4558b2c25bff1106811156cab351ee60eecea2
registry.redhat.io/quay/quay-builder-rhel9@sha256:c6f97848500f5b183e51abd90a6fd9ee5252a9a3632361c9e04050006b850155
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:feb124b6d9152ce1f178b95ef76cd10a6ffb5b229a053423b353326117dc4440
registry.redhat.io/quay/clair-rhel9@sha256:ad18a99cc00b095cd2662a851f48e7ad7838c16c6eade42f74fc1253be26f171
registry.redhat.io/quay/quay-rhel9-operator@sha256:f7bea81df2a4f1b19792e1e0bea92942797cbdbee0668624aee6bd04bd642078
registry.redhat.io/quay/quay-operator-bundle@sha256:a599316cb9b14650c7905c3d89be661b24b6eb70ed9206614fffb262a691f78f
registry.redhat.io/quay/quay-rhel9@sha256:3566bc314b762322a4e284a3c25d73605d3d5b830385d728cae20a04d6d05d9c

arm64

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9a12049745824c3287a5329bf3cc6ee2aed50077e0228842dcf4a6522e65fde7
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:09366031018ce4c8d3c44024d9071ae0e01815d004ab8dec8836e5d6facecf88
registry.redhat.io/quay/quay-builder-rhel9@sha256:44b52322e67352b43e0b15106e40201696d4a06df9099c4ba1319c6bdc998b72
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e659c3887c1b341e9b454a9afa202748c121f8fe56a33c414aae28fda5f2342c
registry.redhat.io/quay/clair-rhel9@sha256:97988569bdee0d7c7f58332b29cd1e6f0904d34b45dc3575d5bc14842754532c
registry.redhat.io/quay/quay-rhel9-operator@sha256:a5b18888adf67592fbaac400ac1f18ad4fac7660267bd44f337107587b29d3e3
registry.redhat.io/quay/quay-rhel9@sha256:d636887b9d91937075cf8cbe22da44c198611066426ecf8a2c11f2885a393593

ppc64le

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:0f27ab91a8b3ab68c93fa0283158df27b5673348e512ef92a2ebc232d4276e71
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:e09ed8b811c482a89c991edbe5b1396f6fad89977391c1f54983f83bc9fc026e
registry.redhat.io/quay/quay-builder-rhel9@sha256:409974747baecda1bf78350bdda94d47629ba9a123b9f42af82ba8c6fb3f81fe
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1da8da1c45e4bdc5e993266fc8987f0ff6ae7966d19bc417898fed2ff2b4895c
registry.redhat.io/quay/clair-rhel9@sha256:f5ad333b119f810a2ed5159e2c0ef0408fef289600815557629f3abca43a6123
registry.redhat.io/quay/quay-rhel9-operator@sha256:fcf8dfd7ba702bc44952389583586525c798ae8712a07e6673db6b1d187b39d6
registry.redhat.io/quay/quay-rhel9@sha256:587bf88dbe1c5872d566190239155eb2a68417890e981fd8368af8bbdebbb75c

s390x

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:ba2abf1c13bce93f9b1fd5d15360e86856f85fb522eaedda12360cc64c492352
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:48270e4b662b67470499f63160b480b2eaacc1f5f73c47ffc4b103a56ed879ba
registry.redhat.io/quay/quay-builder-rhel9@sha256:6feeffda36e71910482369415e9d711de68f13a10976cdbd24f16a42e551499e
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:1f67c3e468157074e559051e74c323b2d4e99ffa7c8bfb1795ffb352f6def248
registry.redhat.io/quay/clair-rhel9@sha256:6b49921ed62820cc11ebbc5222517453ef082982adb9096f8be381c41d84652a
registry.redhat.io/quay/quay-rhel9-operator@sha256:d6390a25be35dd1ffc1d583072ac6a0ad32e233daf91e398c23e8b476cc8a375
registry.redhat.io/quay/quay-rhel9@sha256:5546c198e197c560016320d2dae1757080b3ff5bff7a48387ef2d36cb1b53b74

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility