RHSA-2026:95209 - Security Advisory

Topic

Updated container images are now available for director Operator for Red Hat OpenStack Platform 17.1 (Wallaby) for RHEL 9.2.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.

The Red Hat OpenStack Platform (RHOSP) director Operator adds the ability to install and run a RHOSP cloud within OpenShift Container Platform (OCP).

Security Fixes:

• crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)

Solution

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io or registry.access.redhat.com using the 'podman pull' command.

For more information about the images, search the image name in the Red Hat Ecosystem Catalog.

Affected Products

• Red Hat OpenStack

Fixes

CVEs

• CVE-2026-111943

References

• https://access.redhat.com/security/updates/classification/
• https://catalog.redhat.com/software/containers/search