- Issued:
- 2026-11-05
- Updated:
- 2026-11-05
RHSA-2026:95437 - Security Advisory
Synopsis
LVMS 4.20 Bug Fix and Enhancement update
Type/Severity
Security Advisory: Important
Topic
Updated container images that fix multiple bugs are now available for LVMS 4.20
Description
After a successful LVMS upgrade, the latest lvms-operator SHA image should be running.
This errata bumps golang to address CVE-2026-56860, CVE-2026-56859, CVE-2026-56858, CVE-2026-56862, and CVE-2026-33818 vulnerabilities.
Users of LVMS are advised to upgrade to the latest version in OpenShift Container Platform, which fixes these bugs and adds these enhancements.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Logical Volume Manager Storage
Fixes
(none)amd64
| registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:3bf9159857d70a5d50dc7310d67b3e443aafc68a16f18c73b60b27685cf238b9 |
| registry.redhat.io/lvms4/lvms-operator-bundle@sha256:67c2dce01b9a64fade007751cbd744dc54f1ae2f8307ee47dbb2d3c8582eedab |
| registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:0f462456931cac89fce422b123bc0f185f0d660dd432a566f19d585573c09794 |
arm64
| registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:9c5b936d9721a119b33dd892168aed7b28b48d8a112d47d2547b0c114fb91573 |
| registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:c7d0f6a2eb659b252290e62e21d37d91c6cc7170a020ae6df20f10f96d226560 |
ppc64le
| registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:411522d2695f8738f7643347496a18381aeb87bdc71cb2fd5ea151d517774481 |
| registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:6018a803a027ee60c46446b22a2bb284d684551ed79c6ab869d176a8b7669be5 |
s390x
| registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:fe1f9a49fa6a1b6296e52cbd0564baaa20d4201f20342080ca496afd7a58d060 |
| registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:8d1f826911335f464d79293d306af03d75cefc77e49747e01a23966af223d947 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
