- Issued:
- 2026-01-21
- Updated:
- 2026-01-21
RHSA-2026:0934 - Important: Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
Synopsis
Important: Release of OpenShift Serverless Logic 1.36.0 security update & enhancements
Type/Severity
Security Advisory Important
Topic
Release of OpenShift Serverless Logic 1.36.0
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
This release includes CVE bug fixes:
- CVE-2024-12718 python3-libs-3.6.8-69.el8_10.x86_64 platform-python-3.6.8-69.el8_10.x86_64 RHSA-2025:10128
- CVE-2025-30749 java-17-openjdk-devel-17.0.15.0.6-2.el8.x86_64 java-17-openjdk-17.0.15.0.6-2.el8.x86_64 java-17-openjdk-headless-17.0.15.0.6-2.el8.x86_64 RHSA-2025:10867
- CVE-2025-40778 python3-bind-9.11.36-16.el8_10.4.noarch bind-license-9.11.36-16.el8_10.4.noarch bind-libs-9.11.36-16.el8_10.4.x86_64 bind-libs-lite-9.11.36-16.el8_10.4.x86_64 bind-utils-9.11.36-16.el8_10.4.x86_64 RHSA-2025:19835
- CVE-2025-4138 platform-python-3.6.8-69.el8_10.x86_64 python3-libs-3.6.8-69.el8_10.x86_64 RHSA-2025:10128
- CVE-2025-4517 python3-libs-3.6.8-69.el8_10.x86_64 platform-python-3.6.8-69.el8_10.x86_64 RHSA-2025:10128
- CVE-2025-49794 libxml2-2.9.7-19.el8_10.x86_64 RHSA-2025:10698
- CVE-2025-49796 libxml2-2.9.7-19.el8_10.x86_64 RHSA-2025:10698
- CVE-2025-50059 java-17-openjdk-devel-17.0.15.0.6-2.el8.x86_64java-17-openjdk-17.0.15.0.6-2.el8.x86_64 java-17-openjdk-headless-17.0.15.0.6-2.el8.x86_64 RHSA-2025:10867
- CVE-2025-50106 java-17-openjdk-devel-17.0.15.0.6-2.el8.x86_64, java-17-openjdk-17.0.15.0.6-2.el8.x86_64java-17-openjdk-headless-17.0.15.0.6-2.el8.x86_64 RHSA-2025:10867
- CVE-2025-58060 cups-libs-2.2.6-62.el8_10.x86_64 RHSA-2025:15702
- CVE-2025-5914 libarchive-3.3.3-5.el8.x86_64 RHSA-2025:14135
- CVE-2025-59375 expat-2.2.5-17.el8_10.x86_64 RHSA-2025:21776
- CVE-2025-6020 pam-1.3.1-36.el8_10.x86_64 RHSA-2025:10027
- CVE-2025-6965 sqlite-libs-3.26.0-19.el8_9.x86_64 RHSA-2025:12010
- CVE-2025-7425 libxml2-2.9.7-19.el8_10.x86_64 RHSA-2025:12450
- CVE-2025-8941 pam-1.3.1-36.el8_10.x86_64 RHSA-2025:14557
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Openshift Serverless | 1 | x86_64 |
| Red Hat Openshift Serverless for ARM | 1 | aarch64 |
| Red Hat OpenShift Serverless for IBM Z and LinuxONE | 1 | s390x |
| Red Hat OpenShift Serverless for IBM Power, little endian | 1 | ppc64le |
Fixes
- This content is not included.BZ - 2370013
- This content is not included.BZ - 2370016
- This content is not included.BZ - 2370861
- This content is not included.BZ - 2372373
- This content is not included.BZ - 2372385
- This content is not included.BZ - 2372426
- This content is not included.BZ - 2372512
- This content is not included.BZ - 2376783
- This content is not included.BZ - 2376785
- This content is not included.BZ - 2379031
- This content is not included.BZ - 2379274
- This content is not included.BZ - 2380149
- This content is not included.BZ - 2388220
- This content is not included.BZ - 2392595
- This content is not included.BZ - 2395108
- This content is not included.BZ - 2405827
CVEs
- CVE-2013-0340
- CVE-2016-9840
- CVE-2019-17543
- CVE-2022-23990
- CVE-2023-40403
- CVE-2024-12718
- CVE-2024-28757
- CVE-2024-34397
- CVE-2024-47081
- CVE-2024-52533
- CVE-2024-53920
- CVE-2025-3576
- CVE-2025-4138
- CVE-2025-4330
- CVE-2025-4373
- CVE-2025-4435
- CVE-2025-4517
- CVE-2025-4802
- CVE-2025-5318
- CVE-2025-5372
- CVE-2025-5914
- CVE-2025-6020
- CVE-2025-6021
- CVE-2025-6395
- CVE-2025-6965
- CVE-2025-7425
- CVE-2025-8058
- CVE-2025-8194
- CVE-2025-8941
- CVE-2025-30749
- CVE-2025-32414
- CVE-2025-32415
- CVE-2025-32988
- CVE-2025-32990
- CVE-2025-40778
- CVE-2025-40909
- CVE-2025-47151
- CVE-2025-47273
- CVE-2025-47947
- CVE-2025-49794
- CVE-2025-49796
- CVE-2025-50059
- CVE-2025-50106
- CVE-2025-53057
- CVE-2025-53066
- CVE-2025-53905
- CVE-2025-53906
- CVE-2025-58060
- CVE-2025-58364
- CVE-2025-59375
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.