Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:99026 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:99026 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat Quay - 3.17.7

Type/Severity

Security Advisory: Critical

Topic

Red Hat Quay v3.17.7

Description

Red Hat Quay is a container image registry for building, distributing, and deploying containers.

This advisory contains the container images for Red Hat Quay 3.17.7. See the following Release Notes documentation for additional details about this release:

https://docs.redhat.com/en/documentation/red_hat_quay/3.17/html/red_hat_quay_release_notes/index

Solution

Before you apply this update, make sure all previously released errata that are relevant to your system are applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Quay

Fixes

  • BZ - 2446965
  • BZ - 2524713
  • BZ - 2527118
  • BZ - 2535489
  • BZ - 2535493
  • BZ - 2535494
  • BZ - 2535498
  • BZ - 2535499
  • BZ - 2535500
  • BZ - 2538368
  • BZ - 2542685
  • BZ - 2542690
  • BZ - 2542695
  • BZ - 2542697
  • BZ - 2543245
  • BZ - 2543255
  • BZ - 2544277
  • BZ - 2544294
  • BZ - 2544307
  • BZ - 2544308
  • BZ - 2552249
  • BZ - 2555848
  • BZ - 2563201
  • BZ - 2568072
  • PROJQUAY-14107 - Quay 5.0 repository notification status and event filters do not filter table results

CVEs

  • CVE-2026-102267
  • CVE-2026-102268
  • CVE-2026-102272
  • CVE-2026-102273
  • CVE-2026-102996
  • CVE-2026-102997
  • CVE-2026-102999
  • CVE-2026-103000
  • CVE-2026-110642
  • CVE-2026-112390
  • CVE-2026-118669
  • CVE-2026-123710
  • CVE-2026-32591
  • CVE-2026-77403
  • CVE-2026-77404
  • CVE-2026-77406
  • CVE-2026-77409
  • CVE-2026-77410
  • CVE-2026-77412
  • CVE-2026-79921
  • CVE-2026-84375
  • CVE-2026-93749
  • CVE-2026-97687
  • CVE-2026-97689

References

  • https://access.redhat.com/security/updates/classification/

amd64

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:e45d57eb0c98bb00117c258a89968f1a31ed5ddba775b007f3e39dfae0174e76
registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:e446afe0489ddb3676bac6636f92c01edbe41652abd87433f2e82ba53d426c08
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:8ced624bb54c4d06bb995b158adb1b969f26ff04f0ae47474e395a88aa5b1914
registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:90745cf29982fcfcfa6392bc34500783516c3dc206c2916fd34f1e15b662b604
registry.redhat.io/quay/quay-builder-rhel9@sha256:c3fcd974ac348e5f74f3138e4293fd6b8ee1735f1cfebab3fd7c99b14c81d392
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:5fcf257c298abedc093175c1e698e544a8139235dcd1542933121e310ae60c54
registry.redhat.io/quay/clair-rhel9@sha256:19cd578d96c5c713976a59cfbf17eb90675a854d8e4307ec5aa7faf5c531539c
registry.redhat.io/quay/quay-rhel9-operator@sha256:5a79cf563664d6c25c9f99ff484640ee9bf5dc034b304915832efc57760a0dc7
registry.redhat.io/quay/quay-operator-bundle@sha256:884df5a832cfc50c60718aac7e430d60719e3acc08e789a7f63756fe488c6133
registry.redhat.io/quay/quay-rhel9@sha256:4dcd91bb3456c2fbe4510cb4347ca3ac966bc36470a720ceb1b35171d1c421d3

arm64

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:9ed1b43317ead929986a5ab048e55ca45c5bfc72a016c4fba5ab28e1e186aad6
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:5124f789ddc526cead153924dcf96828d0bde41eb4826fd242df0f733fe54062
registry.redhat.io/quay/quay-builder-rhel9@sha256:dc91bdbbd353e19f5c7b0aab523151e81dcdce77978b3e84a4eeb4a34fc769b8
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:427baef11b03b8c54ecfecccb40dae142222d722f79c0ae78ae0d356b5b4579f
registry.redhat.io/quay/clair-rhel9@sha256:dce2a8e900a151f2e834dfdf27f30be9795da73076433a131b1cf489df7d6a81
registry.redhat.io/quay/quay-rhel9-operator@sha256:42b723cfdbbea8f0f423063502f188687134d7b2bdbf9c3a8fcd13f0ebe84829
registry.redhat.io/quay/quay-rhel9@sha256:8be225a3ff47c3ac6de4e56fa11c63bd422f059be582770f539fb0e5e82aa8bb

ppc64le

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:b016747f0d674bcd20bdfff308867baaeaaf893164c9ccae12e68904aa64cdc9
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:3ec401530d590c83eb3d0534b40d2fc12402ef6c52eea52314773c4af874d69e
registry.redhat.io/quay/quay-builder-rhel9@sha256:63cb0e60cd1f03372ec9b0eaca2eea512f5c28151f9980172a5a49234a91b91d
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:b73cc1ccfdbb9ce32a7f83ca00f26c3e3eca7bfffe3e03ef215d5f0a4da36dd4
registry.redhat.io/quay/clair-rhel9@sha256:f5fbb783f9c3f9c3b690baf3028a95a68d856b322a8978c373ec2dbd2ba7960d
registry.redhat.io/quay/quay-rhel9-operator@sha256:67d969ae8b92dbce8c0ccf457c1bc7381eb25ced42118feb0066b6b6fa2bb265
registry.redhat.io/quay/quay-rhel9@sha256:7bfd7a6fabefa9572f9fde369f1c7e119269d28be8edeaf25d4cf4e7d2ca0dc5

s390x

registry.redhat.io/quay/quay-container-security-rhel9-operator@sha256:4d5bf0193e6b7fa845bed8a3d4ee5980ff0bc7450ce1e99fc28d3a2f96df0a18
registry.redhat.io/quay/quay-bridge-rhel9-operator@sha256:cb7d81d1ee53358bba50ddddff2a2325f0f9e750dc8865dfc31712f533be1176
registry.redhat.io/quay/quay-builder-rhel9@sha256:2dd8defd9c24aac6ffc81e3eebf32fd85f068f2a3991055b10ffa8e0a44e3f6a
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4ae8a70f6c6365d7cba08612c9d44ea8d05b26480902fd8b23b3eb9012567e44
registry.redhat.io/quay/clair-rhel9@sha256:1b88ea791d02967d8fe6fe4b66f8c3e8364eee66ccbc6ae4658604de33f09ad7
registry.redhat.io/quay/quay-rhel9-operator@sha256:39d79eeedc5d6309b6ec8e3a41ec5c9d1afb8893d19e46eb6b50ebcf4b3f7603
registry.redhat.io/quay/quay-rhel9@sha256:d6c963d5384a8e9ad2a38fec311a825cf4054f7407b21ba682be370b4d137ce7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility