RHSA-2026:91172HighCVSS 6.8
Red Hat Security Advisory: Red Hat build of MicroShift 4.20.44 security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-111943 — crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
🎯 Affected products25
- Red Hat OpenShift Container Platform 4.20
- microshift-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.src as a component of Red Hat OpenShift Container Platform 4.20
- microshift-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-ai-model-serving-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-ai-model-serving-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-cert-manager-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-cert-manager-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-cert-manager-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-gateway-api-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-gateway-api-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-gateway-api-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-greenboot-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-low-latency-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-multus-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-multus-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-multus-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-networking-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-networking-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-observability-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-olm-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-olm-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.20
- microshift-olm-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-release-info-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
- microshift-selinux-0:4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9.noarch as a component of Red Hat OpenShift Container Platform 4.20
✅ Remediation
For MicroShift 4.20, read the following documentation for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.20/html/red_hat_build_of_microshift_release_notes/index Workaround: See the security bulletin for a detailed mitigation procedure.