RHSA-2026:94632 - Security Advisory

Topic

Red Hat Edge Manager Version 1.2.2 Security Update

Description

Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.

RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:

Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.

This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.

Value for customers and partners:

• This solution not only helps customers manage thousands of devices but helps

scale operations.

• To manage large-scale deployments, customers need to be able to integrate with

their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.

• Red Hat Edge Manager offers a simple and security-focused lifecycle

management, from onboarding to decommissioning of edge devices.

This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.

Security Fixes:

• flightctl: gRPC-Go: Denial of Service via malformed RPC requests (CVE-2026-84445)
• flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed (CVE-2026-92615)

Solution

See the following documentation for details on how to enable Red Hat Edge
Manager and more:
https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.2

Affected Products

• Red Hat Edge Manager 1.2 for RHEL 10 x86_64
• Red Hat Edge Manager 1.2 for RHEL 10 s390x
• Red Hat Edge Manager 1.2 for RHEL 10 ppc64le
• Red Hat Edge Manager 1.2 for RHEL 10 aarch64
• Red Hat Edge Manager 1.2 for RHEL 9 x86_64
• Red Hat Edge Manager 1.2 for RHEL 9 s390x
• Red Hat Edge Manager 1.2 for RHEL 9 ppc64le
• Red Hat Edge Manager 1.2 for RHEL 9 aarch64

Fixes

• BZ - 2518323 - CVE-2026-92615 flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed
• BZ - 2533175 - CVE-2026-84445 google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

CVEs

• CVE-2026-84445
• CVE-2026-92615

References

• https://access.redhat.com/security/updates/classification/#important