Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:99027 - Security Advisory
Issued:
2026-11-11
Updated:
2026-11-11

RHSA-2026:99027 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat Quay - 3.12.24

Type/Severity

Security Advisory: Critical

Topic

Red Hat Quay v3.12.24

Description

Red Hat Quay is a container image registry for building, distributing, and deploying containers.

This advisory contains the container images for Red Hat Quay 3.12.24. See the following Release Notes documentation for additional details about this release:

https://docs.redhat.com/en/documentation/red_hat_quay/3.12/html/red_hat_quay_release_notes/index

Solution

Before you apply this update, make sure all previously released errata that are relevant to your system are applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Quay

Fixes

  • BZ - 2533602
  • BZ - 2538368
  • BZ - 2542685
  • BZ - 2542690
  • BZ - 2542695
  • BZ - 2542697
  • BZ - 2543245
  • BZ - 2543255
  • BZ - 2544270
  • BZ - 2544277
  • BZ - 2544283
  • BZ - 2544294
  • BZ - 2544307
  • BZ - 2544308
  • BZ - 2555848
  • BZ - 2563201
  • BZ - 2568072

CVEs

  • CVE-2026-102267
  • CVE-2026-102268
  • CVE-2026-102272
  • CVE-2026-102273
  • CVE-2026-102994
  • CVE-2026-102996
  • CVE-2026-102997
  • CVE-2026-102998
  • CVE-2026-102999
  • CVE-2026-103000
  • CVE-2026-112390
  • CVE-2026-118669
  • CVE-2026-123710
  • CVE-2026-90711
  • CVE-2026-93749
  • CVE-2026-97687
  • CVE-2026-97689

References

  • https://access.redhat.com/security/updates/classification/

amd64

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:de112db5e313e87078f7f95b4f29d05a43197f71e53c2dd699d445e5e165b25e
registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:46fa51f582def32d7b7d0e297153b013b7117bc2e8a05b2aa63f7b9da31b28aa
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f4b5c082fbfa6b08e7ca75cf1fb3280130ecf2e21ee1eb913316e7bb49da06a7
registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:9cf53de51ced99122365e8e99b0a1deb05e09021da45320a56e9d05e450a0aa2
registry.redhat.io/quay/quay-builder-rhel8@sha256:031899944b117917b6556dd495c00f2144cbf5e98bef4bff4fda2292ff8ed5e8
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:414e141dde4d9c879de2863cded31890484e988f6f952d145464180cd2ff9507
registry.redhat.io/quay/clair-rhel8@sha256:e2a2521c3434dbb77c3c5391641dc1da3d8c03445a17a3dee6d3d248b4d9e51e
registry.redhat.io/quay/quay-operator-rhel8@sha256:8e759a776e620396b5a7ec8e1a3b7e42965726299e0956ff02e29368babdb06f
registry.redhat.io/quay/quay-operator-bundle@sha256:47bb57979a84ac45de3c63cbdb2526a7d8bf777c35d78de524d4eda16f18c2f8
registry.redhat.io/quay/quay-rhel8@sha256:073ed54b75dfc534eef35836afd19684999beedc67477bfff29bd487e85d4baf

arm64

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:febfd41ba9a52c41cfd7ee65b84e62e2285a7e3e3e265c52c4c5d3b8f0f8c952
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:2c77e9c1a7b7a4ebbbc2e9e8a43abe53188156785d9b75d76697a8b9e89526cf
registry.redhat.io/quay/quay-builder-rhel8@sha256:254b5108e5411817f253813a7030f1762db6cbb0f6a2055b25e369ad28270a11
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:e3822b58493ad1b942b7389ecce610cfbbde21dfe5d0f9a7e069387e9a87fa64
registry.redhat.io/quay/clair-rhel8@sha256:626079799f00008ead86d8302542d2a5a8db4b9bb53a63e47dadd67cdae5b702
registry.redhat.io/quay/quay-operator-rhel8@sha256:313884ff16c888aadf3f79052f84286bbf819f161b6fb0a3700b869f40d8795a
registry.redhat.io/quay/quay-rhel8@sha256:ce8b9169f568de2b4888327fbd4725e0f90f5f723caaf5c44c2fc1d739ee5411

ppc64le

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:b9cd18549e3300ac71efaf6c3037c88ca764bdd922ff7ca2f9f6839acd5be2b7
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:4b1f99f99897606d2d260b344503ce97157f80a37a7aad6c1659226018945960
registry.redhat.io/quay/quay-builder-rhel8@sha256:2f8666204d46b05b671f1700065576d00ade1fde4db565851ff772e467b0323e
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:89b29ec1704056007cee7cd4856dd01138648ed3c9745fe9370b2564258a73e9
registry.redhat.io/quay/clair-rhel8@sha256:c5a288b3328a5f40c8d7fda854e7ed10b0cbeec4b0acc75af0978473a5d98247
registry.redhat.io/quay/quay-operator-rhel8@sha256:9ed0eb0311fd3c1a0bb35046382b91ba6720f2cdd1cf400fd71b3026dd5e11d5
registry.redhat.io/quay/quay-rhel8@sha256:cc0139deca69c5c1d29d0901ec63271ab4781cbd6e1165bc04dc7e2390e238aa

s390x

registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a097b4240189252ab695e81aea8ee461f6c25a9e13382348c79449d30c10591d
registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1036b643eee25a3ea0b7cc126364e0968ea4ee8aeb168597881bfda4a97622d2
registry.redhat.io/quay/quay-builder-rhel8@sha256:b67cb6798bf3f29ff80762253c3989312e36edd822f52281d3207e3228d25c5a
registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:054909890a25a65bebd0198657abb6f9ff3442816ae006cff20eebb3a17e35ec
registry.redhat.io/quay/clair-rhel8@sha256:e81aa4112300a725cd2d18080dbcafccc040716b4f6a7e56ff182a3ece949308
registry.redhat.io/quay/quay-operator-rhel8@sha256:44ec581aa40a4f4adf73d6c783cfe0f7fb49913478f79f3855e6d0eb15c0a41b
registry.redhat.io/quay/quay-rhel8@sha256:40d4eda227d85f155794a043de660aa4811ae12c9fc90b3a36c7b84e8a4b85c8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility