Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:18068: Important: Red Hat build of MicroShift 4.18.42 security update

This security update addresses CVE-2026-33186, a critical (CVSS 9.1) authorization bypass in the gRPC-Go library due to improper HTTP/2 path validation. The vulnerability affects Red Hat build of MicroShift 4.18, specifically where the underlying `grpc-go` library is older than version 1.79.3. The fix is included in the updated MicroShift 4.18.42 packages and images, and administrators should apply this update following Red Hat's documented procedure.
Read Full Article →

Red Hat Product Errata RHSA-2026:18068 - Security Advisory Issued: 2026-05-20 Updated: 2026-05-20 RHSA-2026:18068 - Security Advisory Overview Updated Packages Synopsis Important: Red Hat build of MicroShift 4.18.42 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic Red Hat build of MicroShift release 4.18.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built from the edge capabilities of Red Hat OpenShift Container Platform. MicroShift is an application that is deployed on top of Red Hat Enterprise Linux devices at the edge, providing an efficient way to operate single-node clusters in these low-resource environments. This advisory contains the RPM packages for Red Hat build of MicroShift 4.18.42. Read the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:17448 Security Fix(es): google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186) All Red Hat build of MicroShift 4.18 users are advised to use these updated packages and images when they are available in the RPM repository. Solution For MicroShift 4.18, read the following documentation for important instructions on how to install the latest RPMs and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.18/html/red_hat_build_of_microshift_release_notes/index Affected Products Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64 Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64 Fixes BZ - 2449833 - CVE-2026-33186 google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation OCPBUGS-76625 - Microshift pods fails to start with error container create failed: systemd failed to install eBPF device filter on cgroup OCPBUGS-78040 - MicroShift bootc image has confusing tag names CVEs CVE-2026-33186 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat OpenShift Container Platform 4.18 for RHEL 9 SRPM microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.src.rpm SHA-256: ad7f940503cba67492c21334986699f8727cdd68e947c45e5626271a354a1fe9 x86_64 microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.x86_64.rpm SHA-256: 30c54c4e1cfadfbfd3bd4ebc014067f0a1f3098078f9af44b3b5e370a73bc3ab microshift-gateway-api-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.x86_64.rpm SHA-256: 1ff6c4735d07ab0a93d3ea7c6baa7bd4b6be0520896546593fe0bfdfb438a060 microshift-gateway-api-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 2f764069092aa143436db89c59c1a34e442f6335f5e92cf6c55586db7b6ad6e5 microshift-greenboot-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 403aa2f8cd81fc1088834f1c261c03ba906cca20e315c658cdbf480063288d75 microshift-low-latency-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 54d522468dea9d0ec8a3a97ac545504e34389858563953f6b764a0b7d3757294 microshift-multus-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.x86_64.rpm SHA-256: 4f02fef12cc80c7efb3e2241079c62e0507e6fb884678be1c5a834aa0f603030 microshift-multus-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: cb04cbc529e9e98f40e33b60c9436ef4058e7a295ee369bd56620a63de57061a microshift-networking-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.x86_64.rpm SHA-256: 979befdb3340bfe2771885479555bf0b7093a36fa84696410d8ca7016dacf7ab microshift-olm-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.x86_64.rpm SHA-256: bc7bd0295dfb98c74f84b633654567714c04d220ed879ee0fae7c57ef25fd471 microshift-olm-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 55693e61e8d57839bcd055cc2de194b9a35306722733ee93d2a95f4be951560d microshift-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 4445985a5a19048bb30a31c715c4c7c6e26411eb516e923f48493d7a3751cbb8 microshift-selinux-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: d1601216a2ce699657cca6648a6369bb0c0b83c00d85dae1024d2a3b4918052b Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 SRPM microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.src.rpm SHA-256: ad7f940503cba67492c21334986699f8727cdd68e947c45e5626271a354a1fe9 ppc64le microshift-gateway-api-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 2f764069092aa143436db89c59c1a34e442f6335f5e92cf6c55586db7b6ad6e5 microshift-greenboot-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 403aa2f8cd81fc1088834f1c261c03ba906cca20e315c658cdbf480063288d75 microshift-low-latency-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 54d522468dea9d0ec8a3a97ac545504e34389858563953f6b764a0b7d3757294 microshift-multus-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: cb04cbc529e9e98f40e33b60c9436ef4058e7a295ee369bd56620a63de57061a microshift-olm-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 55693e61e8d57839bcd055cc2de194b9a35306722733ee93d2a95f4be951560d microshift-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 4445985a5a19048bb30a31c715c4c7c6e26411eb516e923f48493d7a3751cbb8 microshift-selinux-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: d1601216a2ce699657cca6648a6369bb0c0b83c00d85dae1024d2a3b4918052b Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 SRPM microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.src.rpm SHA-256: ad7f940503cba67492c21334986699f8727cdd68e947c45e5626271a354a1fe9 s390x microshift-gateway-api-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 2f764069092aa143436db89c59c1a34e442f6335f5e92cf6c55586db7b6ad6e5 microshift-greenboot-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 403aa2f8cd81fc1088834f1c261c03ba906cca20e315c658cdbf480063288d75 microshift-low-latency-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 54d522468dea9d0ec8a3a97ac545504e34389858563953f6b764a0b7d3757294 microshift-multus-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: cb04cbc529e9e98f40e33b60c9436ef4058e7a295ee369bd56620a63de57061a microshift-olm-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 55693e61e8d57839bcd055cc2de194b9a35306722733ee93d2a95f4be951560d microshift-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 4445985a5a19048bb30a31c715c4c7c6e26411eb516e923f48493d7a3751cbb8 microshift-selinux-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: d1601216a2ce699657cca6648a6369bb0c0b83c00d85dae1024d2a3b4918052b Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 SRPM microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.src.rpm SHA-256: ad7f940503cba67492c21334986699f8727cdd68e947c45e5626271a354a1fe9 aarch64 microshift-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64.rpm SHA-256: 2fe144722dc3a3e11e6d543f4ca1b4dcaf4aeb8758d3f435be13e7d5b4a0459a microshift-gateway-api-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64.rpm SHA-256: f54c12590cf756c2d1269c77a4b67dc4d5093bbca4e4190d0b1faaccb203a18a microshift-gateway-api-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 2f764069092aa143436db89c59c1a34e442f6335f5e92cf6c55586db7b6ad6e5 microshift-greenboot-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 403aa2f8cd81fc1088834f1c261c03ba906cca20e315c658cdbf480063288d75 microshift-low-latency-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 54d522468dea9d0ec8a3a97ac545504e34389858563953f6b764a0b7d3757294 microshift-multus-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64.rpm SHA-256: 03949ccf128ef2ae2f5374d74ee2a7a9653bedfa6633962b42fd72a5864005d6 microshift-multus-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: cb04cbc529e9e98f40e33b60c9436ef4058e7a295ee369bd56620a63de57061a microshift-networking-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64.rpm SHA-256: c240558c247eb1ede75192b0099fa7dafd8d97aa3f3a2a44f0b713b549c51e96 microshift-olm-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.aarch64.rpm SHA-256: 061aa28ab4adb26ed20349eec3e831924a4edf3fc6015e4eda5070245bcf582f microshift-olm-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 55693e61e8d57839bcd055cc2de194b9a35306722733ee93d2a95f4be951560d microshift-release-info-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: 4445985a5a19048bb30a31c715c4c7c6e26411eb516e923f48493d7a3751cbb8 microshift-selinux-4.18.42-202605181217.p0.gf4eeb37.assembly.4.18.42.el9.noarch.rpm SHA-256: d1601216a2ce699657cca6648a6369bb0c0b83c00d85dae1024d2a3b4918052b The Red Hat security c

Share this article