RHSA-2026:92291HighCVSS 8.8

Red Hat Security Advisory: LVMS 4.16 Bug Fix and Enhancement update

Published
October 29, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (6)

CVE-2026-32280 →CVE-2026-33810 →CVE-2026-33818 →CVE-2026-56858 →CVE-2026-56860 →CVE-2026-56862 →

📋 Description

CVE-2026-32280 — crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVE-2026-33810 — crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products10

  • Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:7619d31cb5665bb0d5cc85828ffe333df975dd44995cf1a7018a4dd366b322ac_amd64 as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:ae3d954c4f5c95ef077fc65450f4223a4ba2cbb2da9a598c532193eb6720103f_arm64 as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:d1a961f8692bed59bb9f08e1cf02efebb24f7011e151ca9f016686fea43338fd_ppc64le as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-must-gather-rhel9@sha256:fef2a400ee2d3b10b0874db3b3188254dcbe45d9e4f3c074a9edf013a27b83b6_s390x as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-operator-bundle@sha256:71f0d021c171259d9ac7050910cf39da95ef21d01998b5b9c70fceaa7a72a9ad_amd64 as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:155ed19e7da7f2945445bd17a2fda8b3520b971b443ad8a0934c53521f480cb5_s390x as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:68469903bc1c2927ef689e2179f93f9502ce957cc365d69ee35c392683ebe086_arm64 as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:ae58bad590241514ca2b47aecbed39b0c5bb4baeb9999dd3afa8ae357f893ac4_ppc64le as a component of Logical Volume Manager Storage 4.16
  • registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:e6a59190f87676b11455f187e2f9fadfc513fbd3a83a9f55165d01f7cf739013_amd64 as a component of Logical Volume Manager Storage 4.16

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)