RHSA-2026:97829 - Security Advisory

Topic

Updated container images that fix multiple bugs are now available for LVMS 4.21

Description

After a successful LVMS upgrade, the latest lvms-operator SHA image should be running.

This erratum is a security maintenance release that implements the following changes:

• Refreshes the Operator base RPM packages including openssl, systemd, pam, and expat to the latest RHEL 9 security errata
• Updates the UBI minimal base image to its latest digest to pick up operating system security fixes
• Updates the must-gather base image to its latest digest
• Golang version bumps to address CVE-2025-68121, CVE-2026-32283, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, and CVE-2026-33818 vulnerabilities

Users of LVMS are advised to upgrade to the latest version in OpenShift Container Platform, which fixes these bugs and adds these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Logical Volume Manager Storage

Fixes

CVEs

• CVE-2025-68121
• CVE-2026-32283
• CVE-2026-33818
• CVE-2026-56858
• CVE-2026-56859
• CVE-2026-56860
• CVE-2026-56862

References

• https://access.redhat.com/security/updates/classification/