- Issued:
- 2026-11-04
- Updated:
- 2026-11-04
RHSA-2026:95081 - Security Advisory
Synopsis
Cluster Observability Operator - 1.5
Type/Severity
Security Advisory: Important
Topic
Cluster Observability Operator - 1.5
Description
Cluster Observability Operator 1.5 provides observability capabilities for cloud-native applications running on OpenShift.
Solution
For Cluster Observability Operator 1.5, see the following instructions to apply this update:
https://docs.redhat.com/en/documentation/red_hat_openshift_cluster_observability_operator/1-latest
Affected Products
- Cluster Observability Operator
Fixes
- BZ - 2480676
- BZ - 2480756
- BZ - 2484204
- BZ - 2484207
- BZ - 2498152
- BZ - 2515815
- BZ - 2515820
- BZ - 2515827
- BZ - 2515838
- BZ - 2515839
- BZ - 2515840
- BZ - 2517772
- BZ - 2521777
- BZ - 2521778
- BZ - 2521779
- BZ - 2521798
- BZ - 2525936
- BZ - 2526955
- BZ - 2527118
- BZ - 2527747
- BZ - 2528717
- BZ - 2528735
- BZ - 2528759
- BZ - 2533175
- BZ - 2539017
- BZ - 2542700
- BZ - 2542707
- BZ - 2543236
- BZ - 2553103
- BZ - 2553656
- BZ - 2553677
- BZ - 2553678
- BZ - 2553679
- COO-1257 - Controller panics with nil pointer dereference when ObservabilityInstaller has empty spec
- COO-1312 - korrel8r doesn't include the seperate alertmanager for user-workload monitoring
- COO-2519 - Text overlapping and row clipping in OpenShift Console Logs view when browser page is zoomed in
CVEs
- CVE-2026-102276
- CVE-2026-102278
- CVE-2026-109383
- CVE-2026-109829
- CVE-2026-109855
- CVE-2026-109869
- CVE-2026-19534
- CVE-2026-27145
- CVE-2026-33818
- CVE-2026-39821
- CVE-2026-39822
- CVE-2026-39834
- CVE-2026-42504
- CVE-2026-56853
- CVE-2026-56858
- CVE-2026-56859
- CVE-2026-56860
- CVE-2026-56862
- CVE-2026-63209
- CVE-2026-75838
- CVE-2026-75899
- CVE-2026-75931
- CVE-2026-75975
- CVE-2026-76172
- CVE-2026-77301
- CVE-2026-82417
- CVE-2026-84292
- CVE-2026-84304
- CVE-2026-84375
- CVE-2026-84445
- CVE-2026-84961
- CVE-2026-85152
- CVE-2026-87018
amd64
| registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6 |
| registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a |
| registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3 |
| registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2 |
| registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f |
| registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0 |
| registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa |
| registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9 |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8 |
arm64
| registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968 |
| registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e |
| registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876 |
| registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7 |
| registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d |
| registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec |
| registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871 |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354 |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30 |
ppc64le
| registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93 |
| registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139 |
| registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57 |
| registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689 |
| registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e |
| registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439 |
| registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7 |
| registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82 |
s390x
| registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe |
| registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9 |
| registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af |
| registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3 |
| registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c |
| registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795 |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb |
| registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806 |
| registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39 |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd |
| registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1 |
| registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9 |
| registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd |
| registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9 |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6 |
| registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
