Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:99025 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:99025 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat Quay - 3.10.28

Type/Severity

Security Advisory: Critical

Topic

Red Hat Quay v3.10.28

Description

Red Hat Quay is a container image registry for building, distributing, and deploying containers.

This advisory contains the container images for Red Hat Quay 3.10.28. See the following Release Notes documentation for additional details about this release:

https://docs.redhat.com/en/documentation/red_hat_quay/3.10/html/red_hat_quay_release_notes/index

Solution

Before you apply this update, make sure all previously released errata that are relevant to your system are applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Quay

Fixes

  • BZ - 2533602
  • BZ - 2538368
  • BZ - 2542566
  • BZ - 2542685
  • BZ - 2542690
  • BZ - 2542695
  • BZ - 2542697
  • BZ - 2543245
  • BZ - 2543255
  • BZ - 2544270
  • BZ - 2544277
  • BZ - 2544283
  • BZ - 2544294
  • BZ - 2544307
  • BZ - 2544308
  • BZ - 2555848
  • BZ - 2563201
  • BZ - 2568072

CVEs

  • CVE-2026-102267
  • CVE-2026-102268
  • CVE-2026-102272
  • CVE-2026-102273
  • CVE-2026-102994
  • CVE-2026-102996
  • CVE-2026-102997
  • CVE-2026-102998
  • CVE-2026-102999
  • CVE-2026-103000
  • CVE-2026-112390
  • CVE-2026-118669
  • CVE-2026-123710
  • CVE-2026-90711
  • CVE-2026-93749
  • CVE-2026-94603
  • CVE-2026-97687
  • CVE-2026-97689

References

  • https://access.redhat.com/security/updates/classification/

amd64

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:52317e46d5c53891820e7bdccf231c544fb5285da7f188ba0e6306060bb9833e
registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f35cb866dc66b49c064e473fb73505a435dac11e8a29b1476e74db469509e2ac
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:854bbf2e22471b80f4c02ee9d2eb29c4502909ee59fffa9ba61b8c338c75055d
registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:3cbe6593d161c3ef119bbeb99c23d0ceabc46884aa65f8a110c4e41d30f283bd
registry.redhat.io/quay/quay-builder-rhel8@sha256:600040ae0f9d1160c4e614079d0339418445f9e75c05bafeb6c9ccad6856c406
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:baba7fdd5e8e3d3a006b504c706750b0fa2f295c9da0a1b05ebf3130c5e754f9
registry.redhat.io/quay/clair-rhel8@sha256:4d8c2411045eebeb9dc974f23b3dd29e8c81045bc1a4c7cae9322b64ef10c3e9
registry.redhat.io/quay/quay-operator-rhel8@sha256:1d6e8f63fc1f91180279877841ad341730e0d50737cd1dc67b7223251f9b2f0f
registry.redhat.io/quay/quay-operator-bundle@sha256:614176bdfa5ced70d7b119924d90ed1d92f1ebd21a13c090341704970bd90294
registry.redhat.io/quay/quay-rhel8@sha256:9d7348ac1c84173cff2dfbffdab988505193ba17429744b87e3582600a013a37

ppc64le

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9be28ed27d19cd8b37c5232667ee012a56c35be82a26f4f7d7d5039b7b041b14
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:46a7e83e5b9dee22480e789b33318da09fffc961692a96a206faa855e71e1b50
registry.redhat.io/quay/quay-builder-rhel8@sha256:d7499312242d8205637652b51866abeabd37306573e318fcb2013f604aadb34c
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:36f8d8573b5937d9d47ccc38d8945c6e021deaa215a006708b8814721ad96821
registry.redhat.io/quay/clair-rhel8@sha256:4d927e8ea86e93b0879987313db92c9c50438da2632140f9bc4c5a435cf072db
registry.redhat.io/quay/quay-operator-rhel8@sha256:831a1715ba089e866b4560e857bd1142b11f471fc0aaa9c8e54f5092b7719240
registry.redhat.io/quay/quay-rhel8@sha256:e9110ca1f169146ae89b8ea6263cd5d202bffdfa722feccab3415637faa228ce

s390x

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a2bd16f9b174c5a5a6fa2c88281de5fa449187c156493a2e866dbb1d4ac18659
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e90cd0f018b92934203de332677331baafae7a8f9db0d1663f196e4f466d31b1
registry.redhat.io/quay/quay-builder-rhel8@sha256:829ec6eabb7f77d451f759a270bd25110c30b40034eac3108007612fc4534e5e
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:fecd8d85807132cbed64a18d7b52e6732a49e5bc1a840f9c802a898a2fb53ba7
registry.redhat.io/quay/clair-rhel8@sha256:6760d08b7ba58f34a785749ff65608f22d022610e963c21213988195c83a447a
registry.redhat.io/quay/quay-operator-rhel8@sha256:2fa93f4d40f0a6637ee169ebacc7464e44a72dc633ffff44e61e126fc39d16cb
registry.redhat.io/quay/quay-rhel8@sha256:fd727e70b9df9b906bce07146238419c52d57bfaf4ebc782445aa16257e9e4ee

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility