RHSA-2026:95612 - Security Advisory

Topic

An updated OpenShift Compliance Operator image that fixes various bugs and adds new
enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog.

Description

The OpenShift Compliance Operator v1.10.1 is now available.
See the documentation for bug fix information:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/security_and_compliance/compliance-operator#compliance-operator-release-notes

Solution

Before applying this update, make sure all previously released errata relevant to your
system have been applied. For details on how to apply this update, refer to:

https://docs.openshift.com/container-platform/latest/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

• OpenShift Compliance Operator

Fixes

• CMP-4759 - ocp4-audit-log-forwarding-enabled and sibling rules fail with multiple ClusterLogForwarders due to OVAL only_one_exists assertion

CVEs

• CVE-2025-61726
• CVE-2025-61729
• CVE-2026-25679
• CVE-2026-27136
• CVE-2026-27145
• CVE-2026-32280
• CVE-2026-32283
• CVE-2026-33811
• CVE-2026-33814
• CVE-2026-33818
• CVE-2026-39820
• CVE-2026-39821
• CVE-2026-39822
• CVE-2026-42499
• CVE-2026-42504
• CVE-2026-56853
• CVE-2026-56858
• CVE-2026-56859
• CVE-2026-56860
• CVE-2026-56862
• CVE-2026-63209

References

• https://access.redhat.com/security/updates/classification/