Cloud-Native Network Functions on Robin.io 2.2.3 release notes¶
About this release¶
Introduction¶
These release notes describe the differences between CNFs on Robin.io 2.2.2 and 2.2.3.
Supported container-orchestration platforms¶
This release is officially supported on these container-orchestration platforms and versions:
| Platform | Version | Recommended Helm version |
|---|---|---|
| Robin.io | 5.4.3-616 | 3 or later |
| Robin.io | 5.4.3-564 | 3 or later |
| Robin.io | 5.4.3-302 | 3 or later |
| Robin.io | 5.3.11-217 | 3 or later |
Security updates¶
(No F5 security updates)
List of other CVEs¶
| CVE Number | Bug IDs | Image Names | Package Name |
|---|---|---|---|
| CVE-2025-13462 | 2267517, 2267521, 2267533, 2267537, 2267541 | dnsx-img, f5-analyzer, f5-bdosd, gslb-engine, spk-csrc | libpython3.12-minimal |
| CVE-2025-14017 | 2307977 | vault-init | curl |
| CVE-2025-14524 | 2308001 | vault-init | curl |
| CVE-2025-14819 | 2308005 | vault-init | curl |
| CVE-2025-47911 | 2360701, 2360737 | f5-node-labeler, init-certmgr | golang.org/x/net |
| CVE-2025-58190 | 2360705, 2360741 | f5-node-labeler, init-certmgr | golang.org/x/net |
| CVE-2025-69720 | 2308617 | postgresql | ncurses |
| CVE-2026-11856 | 2361217, 2361253, 2361293, 2361329, 2361365 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-12064 | 2361229, 2361269, 2361305, 2361341, 2361377 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-1965 | 2307981 | vault-init | curl |
| CVE-2026-2219 | 2251705 | baseos | dpkg |
| CVE-2026-2297 | 2308933, 2308985, 2308989, 2308993, 2309001, 2309105 | dnsx-img, f5-analyzer, f5-bdosd, f5-nsec-ips-daemon, gslb-engine, spk-csrc | libpython3.12-minimal |
| CVE-2026-2303 | 2359793, 2359881 | f5-toda-tmstatsd, opentelemetry-collector-contri | go.mongodb.org/mongo-driver, go.mongodb.org/mongo-driver/v2 |
| CVE-2026-25680 | 2359053, 2359081, 2359161, 2359189, 2359269, 2359273, 2359277, 2359281, 2359285, 2359505, 2359533, 2359561, 2359589, 2359617, 2359645, 2359705, 2359733, 2359829, 2359857, 2359889, 2359925, 2360077, 2360105, 2360137, 2360165, 2360193, 2360273, 2360353, 2360437, 2360517, 2360597, 2360677, 2360713, 2360749, 2360829, 2360909, 2360937, 2361029, 2361057, 2361137 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-25681 | 2359057, 2359085, 2359165, 2359193, 2359289, 2359293, 2359297, 2359301, 2359305, 2359509, 2359537, 2359565, 2359593, 2359621, 2359649, 2359709, 2359737, 2359833, 2359861, 2359893, 2359929, 2360081, 2360109, 2360141, 2360169, 2360197, 2360277, 2360357, 2360441, 2360521, 2360601, 2360681, 2360717, 2360753, 2360833, 2360913, 2360941, 2361033, 2361061, 2361141 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-2673 | 2266693 | vault | libcrypto3 |
| CVE-2026-27135 | 2308937, 2309029 | f5-fluentbit, ocnos-img | libnghttp2-14 |
| CVE-2026-27136 | 2359061, 2359089, 2359169, 2359197, 2359309, 2359313, 2359317, 2359321, 2359325, 2359513, 2359541, 2359569, 2359597, 2359625, 2359653, 2359713, 2359741, 2359837, 2359865, 2359897, 2359933, 2360085, 2360113, 2360145, 2360173, 2360201, 2360281, 2360361, 2360445, 2360525, 2360605, 2360685, 2360721, 2360757, 2360837, 2360917, 2360945, 2361037, 2361065, 2361145 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-27145 | 2311645, 2311657, 2311669, 2311681, 2311693, 2311697, 2311701, 2311705, 2311709, 2311753, 2311765, 2311777, 2311789, 2311801, 2311813, 2311837, 2311849, 2311861, 2311873, 2311885, 2311897, 2311909, 2311921, 2311933, 2311945, 2311957, 2311969, 2311981, 2311993, 2312005, 2312017, 2312029, 2312041, 2312053, 2312065, 2312077, 2312089, 2312101, 2312113, 2312125, 2312137, 2312149, 2312161, 2312173, 2312185, 2312197, 2312209, 2312229, 2313293, 2334077, 2334081, 2359329 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-27456 | 2313305 | f5-fluentd | libfdisk1 |
| CVE-2026-28387 | 2266697 | vault | libcrypto3 |
| CVE-2026-28388 | 2266661 | vault | libcrypto3 |
| CVE-2026-28389 | 2266665 | vault | libcrypto3 |
| CVE-2026-28390 | 2266641 | vault | libcrypto3 |
| CVE-2026-3039 | 2308969 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-31789 | 2266701 | vault | libcrypto3 |
| CVE-2026-31790 | 2266669 | vault | libcrypto3 |
| CVE-2026-32952 | 2307985, 2308185, 2308221, 2308325, 2308461, 2308925 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, vault, vault-init | github.com/Azure/go-ntlmssp |
| CVE-2026-33811 | 2307029, 2307061, 2307097, 2307129, 2307161, 2307165, 2307169, 2307173, 2307177, 2307321, 2307353, 2307385, 2307417, 2307449, 2307481, 2307545, 2307625, 2307681, 2307713, 2307745, 2307777, 2307809, 2307841, 2307873, 2307905, 2307937, 2308013, 2308045, 2308077, 2308109, 2308153, 2308189, 2308225, 2308257, 2308293, 2308329, 2308361, 2308393, 2308429, 2308465, 2308497, 2308529, 2308733, 2308765, 2308801, 2308833, 2308881, 2309113, 2313233, 2334013, 2334017, 2359333 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-33814 | 2307033, 2307065, 2307101, 2307133, 2307181, 2307185, 2307189, 2307193, 2307197, 2307325, 2307357, 2307389, 2307421, 2307453, 2307485, 2307549, 2307629, 2307685, 2307717, 2307749, 2307781, 2307813, 2307845, 2307877, 2307909, 2307941, 2308017, 2308049, 2308081, 2308113, 2308157, 2308193, 2308229, 2308261, 2308297, 2308333, 2308365, 2308397, 2308433, 2308469, 2308501, 2308533, 2308737, 2308769, 2308805, 2308837, 2308885, 2309117, 2313237, 2334021, 2334025, 2359337 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-33845 | 2308577, 2309149 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-33846 | 2308621, 2309153 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-34180 | 2334133, 2334193, 2334257 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-34181 | 2334137, 2334197 | vault, vault-init | libcrypto3 |
| CVE-2026-34182 | 2334117, 2334177, 2334245 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-34183 | 2334121, 2334181 | vault, vault-init | libcrypto3 |
| CVE-2026-34743 | 2308997, 2309229 | baseos, rabbit | liblzma5, xz-utils |
| CVE-2026-35385 | 2309005 | gslb-engine | openssh-client |
| CVE-2026-35386 | 2309009 | gslb-engine | openssh-client |
| CVE-2026-35387 | 2309013 | gslb-engine | openssh-client |
| CVE-2026-35388 | 2309017 | gslb-engine | openssh-client |
| CVE-2026-35414 | 2309021 | gslb-engine | openssh-client |
| CVE-2026-35469 | 2307069, 2308265, 2308401 | f5-downloader, f5-license-helper, spk-cwc | github.com/moby/spdystream |
| CVE-2026-3592 | 2308973 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-3783 | 2307989 | vault-init | curl |
| CVE-2026-3784 | 2307993 | vault-init | curl |
| CVE-2026-3805 | 2307997 | vault-init | curl |
| CVE-2026-3832 | 2309157 | baseos | libgnutls30t64 |
| CVE-2026-3833 | 2308625, 2309161 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-39820 | 2307037, 2307073, 2307105, 2307137, 2307201, 2307205, 2307209, 2307213, 2307217, 2307329, 2307361, 2307393, 2307425, 2307457, 2307489, 2307553, 2307633, 2307689, 2307721, 2307753, 2307785, 2307817, 2307849, 2307881, 2307913, 2307945, 2308021, 2308053, 2308085, 2308117, 2308161, 2308197, 2308233, 2308269, 2308301, 2308337, 2308369, 2308405, 2308437, 2308473, 2308505, 2308537, 2308741, 2308773, 2308809, 2308841, 2308889, 2309121, 2313241, 2334029, 2334033, 2359341 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39821 | 2359065, 2359093, 2359173, 2359201, 2359345, 2359349, 2359353, 2359357, 2359361, 2359517, 2359545, 2359573, 2359601, 2359629, 2359657, 2359717, 2359745, 2359841, 2359869, 2359901, 2359937, 2360089, 2360117, 2360149, 2360177, 2360205, 2360285, 2360365, 2360449, 2360529, 2360609, 2360689, 2360725, 2360761, 2360841, 2360921, 2360949, 2361041, 2361069, 2361149 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-39823 | 2307041, 2307077, 2307109, 2307141, 2307221, 2307225, 2307229, 2307233, 2307237, 2307333, 2307365, 2307397, 2307429, 2307461, 2307493, 2307561, 2307637, 2307693, 2307725, 2307757, 2307789, 2307821, 2307853, 2307885, 2307917, 2307949, 2308025, 2308057, 2308089, 2308121, 2308165, 2308201, 2308237, 2308273, 2308305, 2308341, 2308373, 2308409, 2308441, 2308477, 2308509, 2308541, 2308745, 2308781, 2308813, 2308845, 2308893, 2309125, 2313245, 2334037, 2334041, 2359453 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39824 | 2359077, 2359157, 2359185, 2359265, 2359485, 2359489, 2359493, 2359497, 2359501, 2359529, 2359557, 2359585, 2359613, 2359641, 2359669, 2359729, 2359825, 2359853, 2359885, 2359913, 2360073, 2360101, 2360129, 2360133, 2360161, 2360189, 2360269, 2360349, 2360429, 2360433, 2360513, 2360593, 2360673, 2360709, 2360745, 2360825, 2360905, 2360933, 2361021, 2361025, 2361053, 2361133, 2361213 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc, tmrouted-img | golang.org/x/sys |
| CVE-2026-39825 | 2307045, 2307081, 2307113, 2307145, 2307241, 2307245, 2307249, 2307253, 2307257, 2307337, 2307369, 2307401, 2307433, 2307465, 2307497, 2307585, 2307641, 2307697, 2307729, 2307761, 2307793, 2307825, 2307857, 2307889, 2307921, 2307953, 2308029, 2308061, 2308093, 2308125, 2308169, 2308205, 2308241, 2308277, 2308309, 2308345, 2308377, 2308413, 2308445, 2308481, 2308513, 2308545, 2308749, 2308785, 2308817, 2308849, 2308897, 2309129, 2313249, 2334045, 2334049, 2359457 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39826 | 2307049, 2307085, 2307117, 2307149, 2307261, 2307265, 2307269, 2307273, 2307277, 2307341, 2307373, 2307405, 2307437, 2307469, 2307501, 2307609, 2307645, 2307701, 2307733, 2307765, 2307797, 2307829, 2307861, 2307893, 2307925, 2307957, 2308033, 2308065, 2308097, 2308129, 2308173, 2308209, 2308245, 2308281, 2308313, 2308349, 2308381, 2308417, 2308449, 2308485, 2308517, 2308549, 2308753, 2308789, 2308821, 2308853, 2308901, 2309133, 2313253, 2334085, 2334089, 2359461 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39827 | 2359097, 2359205, 2359365, 2359749, 2359941, 2360209, 2360289, 2360369, 2360453, 2360533, 2360613, 2360765, 2360845, 2360953, 2361073, 2361153 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39828 | 2359101, 2359209, 2359369, 2359753, 2359945, 2360213, 2360293, 2360373, 2360457, 2360537, 2360617, 2360769, 2360849, 2360957, 2361077, 2361157 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39829 | 2359105, 2359213, 2359373, 2359757, 2359949, 2360217, 2360297, 2360377, 2360461, 2360541, 2360621, 2360773, 2360853, 2360961, 2361081, 2361161 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39830 | 2359109, 2359217, 2359377, 2359761, 2359953, 2360221, 2360301, 2360381, 2360465, 2360545, 2360625, 2360777, 2360857, 2360965, 2361085, 2361165 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39831 | 2359141, 2359249, 2359465, 2359797, 2360045, 2360253, 2360333, 2360413, 2360497, 2360577, 2360657, 2360809, 2360889, 2361001, 2361117, 2361197 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39832 | 2359113, 2359221, 2359381, 2359765, 2359957, 2360225, 2360305, 2360385, 2360469, 2360549, 2360629, 2360781, 2360861, 2360969, 2361089, 2361169 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39833 | 2359145, 2359253, 2359469, 2359801, 2360049, 2360257, 2360337, 2360417, 2360501, 2360581, 2360661, 2360813, 2360893, 2361005, 2361121, 2361201 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39834 | 2359149, 2359257, 2359473, 2359805, 2360053, 2360261, 2360341, 2360421, 2360505, 2360585, 2360665, 2360817, 2360897, 2361009, 2361125, 2361205 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39835 | 2359117, 2359225, 2359385, 2359769, 2359961, 2360229, 2360309, 2360389, 2360473, 2360553, 2360633, 2360785, 2360865, 2360973, 2361093, 2361173 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39836 | 2307053, 2307089, 2307121, 2307153, 2307281, 2307285, 2307289, 2307293, 2307297, 2307345, 2307377, 2307409, 2307441, 2307473, 2307505, 2307617, 2307649, 2307705, 2307737, 2307769, 2307801, 2307833, 2307865, 2307897, 2307929, 2307961, 2308037, 2308069, 2308101, 2308133, 2308177, 2308213, 2308249, 2308285, 2308317, 2308353, 2308385, 2308421, 2308453, 2308489, 2308521, 2308553, 2308757, 2308793, 2308825, 2308857, 2308905, 2309137, 2313257, 2334053, 2334057, 2359389 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-40179 | 2266477 | opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-40200 | 2266709 | vault | musl |
| CVE-2026-40226 | 2334233, 2334249 | baseos, f5-fluentd | libsystemd-shared, libsystemd0 |
| CVE-2026-40228 | 2334237 | f5-fluentd | libsystemd-shared |
| CVE-2026-41080 | 2308629 | postgresql | expat-libs |
| CVE-2026-41316 | 2313261 | f5-fluentd | erb |
| CVE-2026-41602 | 2307653, 2307965, 2308909 | opentelemetry-collector-contri, vault, vault-init | github.com/apache/thrift |
| CVE-2026-41889 | 2307677, 2308009, 2308929 | opentelemetry-collector-contri, vault, vault-init | github.com/jackc/pgx/v5 |
| CVE-2026-41989 | 2309169 | baseos | libgcrypt20 |
| CVE-2026-42009 | 2309173 | baseos | libgnutls30t64 |
| CVE-2026-42010 | 2308581, 2309177 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-42011 | 2308633, 2309181 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-42012 | 2309185 | baseos | libgnutls30t64 |
| CVE-2026-42013 | 2309189 | baseos | libgnutls30t64 |
| CVE-2026-42014 | 2309193 | baseos | libgnutls30t64 |
| CVE-2026-42015 | 2309197 | baseos | libgnutls30t64 |
| CVE-2026-42151 | 2307657, 2308137, 2308861, 2313265 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42154 | 2307661, 2308141, 2308865, 2313269 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42245 | 2313273 | f5-fluentd | net-imap |
| CVE-2026-42246 | 2313277 | f5-fluentd | net-imap |
| CVE-2026-42256 | 2313285 | f5-fluentd | net-imap |
| CVE-2026-42257 | 2313225 | f5-fluentd | net-imap |
| CVE-2026-42258 | 2313229 | f5-fluentd | net-imap |
| CVE-2026-42496 | 2361401 | baseos | perl-base |
| CVE-2026-42499 | 2307057, 2307093, 2307125, 2307157, 2307301, 2307305, 2307309, 2307313, 2307317, 2307349, 2307381, 2307413, 2307445, 2307477, 2307509, 2307621, 2307665, 2307709, 2307741, 2307773, 2307805, 2307837, 2307869, 2307901, 2307933, 2307969, 2308041, 2308073, 2308105, 2308145, 2308181, 2308217, 2308253, 2308289, 2308321, 2308357, 2308389, 2308425, 2308457, 2308493, 2308525, 2308557, 2308761, 2308797, 2308829, 2308869, 2308913, 2309141, 2313281, 2334061, 2334065, 2359393 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42502 | 2359069, 2359121, 2359177, 2359229, 2359397, 2359401, 2359405, 2359409, 2359413, 2359521, 2359549, 2359577, 2359605, 2359633, 2359661, 2359721, 2359773, 2359845, 2359873, 2359905, 2359965, 2360093, 2360121, 2360153, 2360181, 2360233, 2360313, 2360393, 2360477, 2360557, 2360637, 2360693, 2360729, 2360789, 2360869, 2360925, 2360977, 2361045, 2361097, 2361177 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-42504 | 2311649, 2311661, 2311673, 2311685, 2311713, 2311717, 2311721, 2311725, 2311729, 2311757, 2311769, 2311781, 2311793, 2311805, 2311817, 2311841, 2311853, 2311865, 2311877, 2311889, 2311901, 2311913, 2311925, 2311937, 2311949, 2311961, 2311973, 2311985, 2311997, 2312009, 2312021, 2312033, 2312045, 2312057, 2312069, 2312081, 2312093, 2312105, 2312117, 2312129, 2312141, 2312153, 2312165, 2312177, 2312189, 2312201, 2312213, 2312233, 2313297, 2334069, 2334073, 2359417 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42506 | 2359073, 2359125, 2359181, 2359233, 2359421, 2359425, 2359429, 2359433, 2359437, 2359525, 2359553, 2359581, 2359609, 2359637, 2359665, 2359725, 2359777, 2359849, 2359877, 2359909, 2359969, 2360097, 2360125, 2360157, 2360185, 2360237, 2360317, 2360397, 2360481, 2360561, 2360641, 2360697, 2360733, 2360793, 2360873, 2360929, 2360981, 2361049, 2361101, 2361181 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-42507 | 2311653, 2311665, 2311677, 2311689, 2311733, 2311737, 2311741, 2311745, 2311749, 2311761, 2311773, 2311785, 2311797, 2311809, 2311821, 2311845, 2311857, 2311869, 2311881, 2311893, 2311905, 2311917, 2311929, 2311941, 2311953, 2311965, 2311977, 2311989, 2312001, 2312013, 2312025, 2312037, 2312049, 2312061, 2312073, 2312085, 2312097, 2312109, 2312121, 2312133, 2312145, 2312157, 2312169, 2312181, 2312193, 2312205, 2312217, 2312237, 2313301, 2334093, 2334097, 2359477 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42508 | 2359129, 2359237, 2359441, 2359781, 2359973, 2360241, 2360321, 2360401, 2360485, 2360565, 2360645, 2360797, 2360877, 2360985, 2361105, 2361185 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-42602 | 2307669 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-42764 | 2334125, 2334185 | vault, vault-init | libcrypto3 |
| CVE-2026-42766 | 2334141, 2334201, 2334265 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-42767 | 2334145, 2334205, 2334269 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-42768 | 2334149, 2334209 | vault, vault-init | libcrypto3 |
| CVE-2026-42769 | 2334153, 2334213 | vault, vault-init | libcrypto3 |
| CVE-2026-42770 | 2334157, 2334217, 2334273 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-44024 | 2359917 | f5-fluentd | fluentd |
| CVE-2026-44025 | 2359977 | f5-fluentd | fluentd |
| CVE-2026-44160 | 2359981 | f5-fluentd | fluentd |
| CVE-2026-44161 | 2359985 | f5-fluentd | fluentd |
| CVE-2026-44503 | 2307973, 2308921 | vault, vault-init | github.com/microsoft/kiota-http-go |
| CVE-2026-44903 | 2307673, 2308149, 2308877, 2313289 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-45186 | 2316369 | postgresql | expat-libs |
| CVE-2026-45445 | 2334129, 2334189, 2334253 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-45446 | 2334161, 2334221, 2334277 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-45447 | 2334113, 2334173, 2334241 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-46595 | 2359133, 2359241, 2359445, 2359785, 2359989, 2360245, 2360325, 2360405, 2360489, 2360569, 2360649, 2360801, 2360881, 2360989, 2361109, 2361189 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46597 | 2359137, 2359245, 2359449, 2359789, 2359993, 2360249, 2360329, 2360409, 2360493, 2360573, 2360653, 2360805, 2360885, 2360993, 2361113, 2361193 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46598 | 2359153, 2359261, 2359481, 2359809, 2360057, 2360265, 2360345, 2360425, 2360509, 2360589, 2360669, 2360821, 2360901, 2361013, 2361129, 2361209 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46680 | 2308561 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-47240 | 2334101 | f5-fluentd | net-imap |
| CVE-2026-47241 | 2334109 | f5-fluentd | net-imap |
| CVE-2026-47242 | 2334105 | f5-fluentd | net-imap |
| CVE-2026-47256 | 2359813 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-47262 | 2361017 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-48496 | 2359817 | opentelemetry-collector-contri | go.opentelemetry.io/ebpf-profiler |
| CVE-2026-4873 | 2308677, 2308957, 2309093 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-4878 | 2309209 | baseos | libcap2 |
| CVE-2026-49014 | 2316373 | postgresql | gdal |
| CVE-2026-5260 | 2309213 | baseos | libgnutls30t64 |
| CVE-2026-53488 | 2360997 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-54171 | 2360061 | f5-fluentd | excon |
| CVE-2026-5419 | 2309217 | baseos | libgnutls30t64 |
| CVE-2026-54297 | 2359997 | f5-fluentd | faraday |
| CVE-2026-5450 | 2308585, 2360001, 2360065 | f5-fluentd, postgresql | glibc, oj |
| CVE-2026-54500 | 2360065 | f5-fluentd | oj |
| CVE-2026-54502 | 2360001 | f5-fluentd | oj |
| CVE-2026-54592 | 2360005 | f5-fluentd | oj |
| CVE-2026-54896 | 2360009 | f5-fluentd | oj |
| CVE-2026-54897 | 2360013 | f5-fluentd | oj |
| CVE-2026-54898 | 2360017 | f5-fluentd | oj |
| CVE-2026-54899 | 2360021 | f5-fluentd | oj |
| CVE-2026-54900 | 2360025 | f5-fluentd | oj |
| CVE-2026-54901 | 2360029 | f5-fluentd | oj |
| CVE-2026-54902 | 2360033 | f5-fluentd | oj |
| CVE-2026-54903 | 2360037 | f5-fluentd | oj |
| CVE-2026-54904 | 2360041 | f5-fluentd | concurrent-ruby |
| CVE-2026-54905 | 2360069 | f5-fluentd | concurrent-ruby |
| CVE-2026-54906 | 2359921 | f5-fluentd | concurrent-ruby |
| CVE-2026-5545 | 2308681, 2308941, 2309033 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-55701 | 2359821 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-5704 | 2309221 | baseos | tar |
| CVE-2026-5773 | 2308637, 2308961, 2309097 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-5928 | 2308641 | postgresql | glibc |
| CVE-2026-5946 | 2308977 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5950 | 2308981 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5958 | 2309225 | baseos | sed |
| CVE-2026-6042 | 2266713 | vault | musl |
| CVE-2026-6253 | 2308685, 2308945, 2309037 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6276 | 2308645, 2308965, 2309101 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6429 | 2308689, 2308949, 2309041 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6472 | 2308693, 2309045 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6473 | 2308649, 2309049 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6474 | 2308697, 2309053 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6475 | 2308653, 2309057 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6476 | 2308657, 2309061 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6477 | 2308661, 2309065 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6478 | 2308701, 2309069 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6479 | 2308665, 2309073 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6575 | 2308705, 2309077 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6637 | 2308669, 2309081 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6638 | 2308673, 2309085 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6653 | 2361257 | f5-debug-sidecar | libxml2 |
| CVE-2026-6842 | 2316385 | f5-debug-sidecar | nano |
| CVE-2026-6843 | 2316389 | f5-debug-sidecar | nano |
| CVE-2026-7168 | 2308953, 2309089, 2316381 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-7383 | 2334165, 2334225, 2334281 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-8084 | 2308709 | postgresql | gdal |
| CVE-2026-8086 | 2308713 | postgresql | gdal |
| CVE-2026-8087 | 2308717 | postgresql | gdal |
| CVE-2026-8088 | 2308721 | postgresql | gdal |
| CVE-2026-8212 | 2308725 | postgresql | gdal |
| CVE-2026-8213 | 2308729 | postgresql | gdal |
| CVE-2026-8286 | 2361233, 2361273, 2361309, 2361345, 2361381 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8376 | 2361405 | baseos | perl-base |
| CVE-2026-8458 | 2361237, 2361277, 2361313, 2361349, 2361385 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8924 | 2361241, 2361281, 2361317, 2361353, 2361389 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8927 | 2361221, 2361261, 2361297, 2361333, 2361369 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8932 | 2361245, 2361285, 2361321, 2361357, 2361393 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-9076 | 2334169, 2334229, 2334285 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-9547 | 2361249, 2361289, 2361325, 2361361, 2361397 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
New features¶
(No new features)
Enhancements¶
(No new enhancements)
Model changes¶
(No model changes)
Fixed issues¶
(No fixed issues)
Known issues¶
2390813-1¶
Title: Controller fails to update TMM pod annotations after reconfiguring VLAN
Component: ingress
Symptoms: Controller fails to update “k8s.v1.cni.cncf.io/network-status” annotation on TMM pods with its assigned selfIP from the internal VLAN.
Conditions:
If the internal VLAN is updated with change in selfIPs.
If controller deployment is updated with change in
MAX_ACTIVE_TMM_REPLICASenvironment variable.
Impact: The k8s.v1.cni.cncf.io/network-status annotations on TMM pods show stale or missing selfIPs which result into egress traffic failure.
Workaround: Delete the internal VLAN and recreate it.