BIG-IP Next for Kubernetes (Host) 2.2.3 release notes¶
About this release¶
Introduction¶
These release notes describe the differences between BIG-IP Next for Kubernetes (Host) 2.2.2 and 2.2.3.
Supported container-orchestration platforms¶
This release is officially supported on these container-orchestration platforms and versions:
| Platform | Version | Recommended Helm version |
|---|---|---|
| OpenShift | 4.14 | 3.15 |
| OpenShift | 4.16 | 3.17 |
| OpenShift | 4.18 | 3.19 |
Security updates¶
(No F5 security updates)
List of other CVEs¶
| CVE Number | Bug IDs | Image Names | Package Name |
|---|---|---|---|
| CVE-2025-13462 | 2267517, 2267521, 2267533, 2267537, 2267541 | dnsx-img, f5-analyzer, f5-bdosd, gslb-engine, spk-csrc | libpython3.12-minimal |
| CVE-2025-14017 | 2307977 | vault-init | curl |
| CVE-2025-14524 | 2308001 | vault-init | curl |
| CVE-2025-14819 | 2308005 | vault-init | curl |
| CVE-2025-47911 | 2360701, 2360737 | f5-node-labeler, init-certmgr | golang.org/x/net |
| CVE-2025-58190 | 2360705, 2360741 | f5-node-labeler, init-certmgr | golang.org/x/net |
| CVE-2025-69720 | 2308617 | postgresql | ncurses |
| CVE-2026-11856 | 2361217, 2361253, 2361293, 2361329, 2361365 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-12064 | 2361229, 2361269, 2361305, 2361341, 2361377 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-1965 | 2307981 | vault-init | curl |
| CVE-2026-2219 | 2251705 | baseos | dpkg |
| CVE-2026-2297 | 2308933, 2308985, 2308989, 2308993, 2309001, 2309105 | dnsx-img, f5-analyzer, f5-bdosd, f5-nsec-ips-daemon, gslb-engine, spk-csrc | libpython3.12-minimal |
| CVE-2026-2303 | 2359793, 2359881 | f5-toda-tmstatsd, opentelemetry-collector-contri | go.mongodb.org/mongo-driver, go.mongodb.org/mongo-driver/v2 |
| CVE-2026-25680 | 2359053, 2359081, 2359161, 2359189, 2359269, 2359273, 2359277, 2359281, 2359285, 2359505, 2359533, 2359561, 2359589, 2359617, 2359645, 2359705, 2359733, 2359829, 2359857, 2359889, 2359925, 2360077, 2360105, 2360137, 2360165, 2360193, 2360273, 2360353, 2360437, 2360517, 2360597, 2360677, 2360713, 2360749, 2360829, 2360909, 2360937, 2361029, 2361057, 2361137 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-25681 | 2359057, 2359085, 2359165, 2359193, 2359289, 2359293, 2359297, 2359301, 2359305, 2359509, 2359537, 2359565, 2359593, 2359621, 2359649, 2359709, 2359737, 2359833, 2359861, 2359893, 2359929, 2360081, 2360109, 2360141, 2360169, 2360197, 2360277, 2360357, 2360441, 2360521, 2360601, 2360681, 2360717, 2360753, 2360833, 2360913, 2360941, 2361033, 2361061, 2361141 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-2673 | 2266693 | vault | libcrypto3 |
| CVE-2026-27135 | 2308937, 2309029 | f5-fluentbit, ocnos-img | libnghttp2-14 |
| CVE-2026-27136 | 2359061, 2359089, 2359169, 2359197, 2359309, 2359313, 2359317, 2359321, 2359325, 2359513, 2359541, 2359569, 2359597, 2359625, 2359653, 2359713, 2359741, 2359837, 2359865, 2359897, 2359933, 2360085, 2360113, 2360145, 2360173, 2360201, 2360281, 2360361, 2360445, 2360525, 2360605, 2360685, 2360721, 2360757, 2360837, 2360917, 2360945, 2361037, 2361065, 2361145 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-27145 | 2311645, 2311657, 2311669, 2311681, 2311693, 2311697, 2311701, 2311705, 2311709, 2311753, 2311765, 2311777, 2311789, 2311801, 2311813, 2311837, 2311849, 2311861, 2311873, 2311885, 2311897, 2311909, 2311921, 2311933, 2311945, 2311957, 2311969, 2311981, 2311993, 2312005, 2312017, 2312029, 2312041, 2312053, 2312065, 2312077, 2312089, 2312101, 2312113, 2312125, 2312137, 2312149, 2312161, 2312173, 2312185, 2312197, 2312209, 2312229, 2313293, 2334077, 2334081, 2359329 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-27456 | 2313305 | f5-fluentd | libfdisk1 |
| CVE-2026-28387 | 2266697 | vault | libcrypto3 |
| CVE-2026-28388 | 2266661 | vault | libcrypto3 |
| CVE-2026-28389 | 2266665 | vault | libcrypto3 |
| CVE-2026-28390 | 2266641 | vault | libcrypto3 |
| CVE-2026-3039 | 2308969 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-31789 | 2266701 | vault | libcrypto3 |
| CVE-2026-31790 | 2266669 | vault | libcrypto3 |
| CVE-2026-32952 | 2307985, 2308185, 2308221, 2308325, 2308461, 2308925 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, vault, vault-init | github.com/Azure/go-ntlmssp |
| CVE-2026-33811 | 2307029, 2307061, 2307097, 2307129, 2307161, 2307165, 2307169, 2307173, 2307177, 2307321, 2307353, 2307385, 2307417, 2307449, 2307481, 2307545, 2307625, 2307681, 2307713, 2307745, 2307777, 2307809, 2307841, 2307873, 2307905, 2307937, 2308013, 2308045, 2308077, 2308109, 2308153, 2308189, 2308225, 2308257, 2308293, 2308329, 2308361, 2308393, 2308429, 2308465, 2308497, 2308529, 2308733, 2308765, 2308801, 2308833, 2308881, 2309113, 2313233, 2334013, 2334017, 2359333 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-33814 | 2307033, 2307065, 2307101, 2307133, 2307181, 2307185, 2307189, 2307193, 2307197, 2307325, 2307357, 2307389, 2307421, 2307453, 2307485, 2307549, 2307629, 2307685, 2307717, 2307749, 2307781, 2307813, 2307845, 2307877, 2307909, 2307941, 2308017, 2308049, 2308081, 2308113, 2308157, 2308193, 2308229, 2308261, 2308297, 2308333, 2308365, 2308397, 2308433, 2308469, 2308501, 2308533, 2308737, 2308769, 2308805, 2308837, 2308885, 2309117, 2313237, 2334021, 2334025, 2359337 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-33845 | 2308577, 2309149 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-33846 | 2308621, 2309153 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-34180 | 2334133, 2334193, 2334257 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-34181 | 2334137, 2334197 | vault, vault-init | libcrypto3 |
| CVE-2026-34182 | 2334117, 2334177, 2334245 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-34183 | 2334121, 2334181 | vault, vault-init | libcrypto3 |
| CVE-2026-34743 | 2308997, 2309229 | baseos, rabbit | liblzma5, xz-utils |
| CVE-2026-35385 | 2309005 | gslb-engine | openssh-client |
| CVE-2026-35386 | 2309009 | gslb-engine | openssh-client |
| CVE-2026-35387 | 2309013 | gslb-engine | openssh-client |
| CVE-2026-35388 | 2309017 | gslb-engine | openssh-client |
| CVE-2026-35414 | 2309021 | gslb-engine | openssh-client |
| CVE-2026-35469 | 2307069, 2308265, 2308401 | f5-downloader, f5-license-helper, spk-cwc | github.com/moby/spdystream |
| CVE-2026-3592 | 2308973 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-3783 | 2307989 | vault-init | curl |
| CVE-2026-3784 | 2307993 | vault-init | curl |
| CVE-2026-3805 | 2307997 | vault-init | curl |
| CVE-2026-3832 | 2309157 | baseos | libgnutls30t64 |
| CVE-2026-3833 | 2308625, 2309161 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-39820 | 2307037, 2307073, 2307105, 2307137, 2307201, 2307205, 2307209, 2307213, 2307217, 2307329, 2307361, 2307393, 2307425, 2307457, 2307489, 2307553, 2307633, 2307689, 2307721, 2307753, 2307785, 2307817, 2307849, 2307881, 2307913, 2307945, 2308021, 2308053, 2308085, 2308117, 2308161, 2308197, 2308233, 2308269, 2308301, 2308337, 2308369, 2308405, 2308437, 2308473, 2308505, 2308537, 2308741, 2308773, 2308809, 2308841, 2308889, 2309121, 2313241, 2334029, 2334033, 2359341 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39821 | 2359065, 2359093, 2359173, 2359201, 2359345, 2359349, 2359353, 2359357, 2359361, 2359517, 2359545, 2359573, 2359601, 2359629, 2359657, 2359717, 2359745, 2359841, 2359869, 2359901, 2359937, 2360089, 2360117, 2360149, 2360177, 2360205, 2360285, 2360365, 2360449, 2360529, 2360609, 2360689, 2360725, 2360761, 2360841, 2360921, 2360949, 2361041, 2361069, 2361149 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-39823 | 2307041, 2307077, 2307109, 2307141, 2307221, 2307225, 2307229, 2307233, 2307237, 2307333, 2307365, 2307397, 2307429, 2307461, 2307493, 2307561, 2307637, 2307693, 2307725, 2307757, 2307789, 2307821, 2307853, 2307885, 2307917, 2307949, 2308025, 2308057, 2308089, 2308121, 2308165, 2308201, 2308237, 2308273, 2308305, 2308341, 2308373, 2308409, 2308441, 2308477, 2308509, 2308541, 2308745, 2308781, 2308813, 2308845, 2308893, 2309125, 2313245, 2334037, 2334041, 2359453 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39824 | 2359077, 2359157, 2359185, 2359265, 2359485, 2359489, 2359493, 2359497, 2359501, 2359529, 2359557, 2359585, 2359613, 2359641, 2359669, 2359729, 2359825, 2359853, 2359885, 2359913, 2360073, 2360101, 2360129, 2360133, 2360161, 2360189, 2360269, 2360349, 2360429, 2360433, 2360513, 2360593, 2360673, 2360709, 2360745, 2360825, 2360905, 2360933, 2361021, 2361025, 2361053, 2361133, 2361213 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc, tmrouted-img | golang.org/x/sys |
| CVE-2026-39825 | 2307045, 2307081, 2307113, 2307145, 2307241, 2307245, 2307249, 2307253, 2307257, 2307337, 2307369, 2307401, 2307433, 2307465, 2307497, 2307585, 2307641, 2307697, 2307729, 2307761, 2307793, 2307825, 2307857, 2307889, 2307921, 2307953, 2308029, 2308061, 2308093, 2308125, 2308169, 2308205, 2308241, 2308277, 2308309, 2308345, 2308377, 2308413, 2308445, 2308481, 2308513, 2308545, 2308749, 2308785, 2308817, 2308849, 2308897, 2309129, 2313249, 2334045, 2334049, 2359457 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39826 | 2307049, 2307085, 2307117, 2307149, 2307261, 2307265, 2307269, 2307273, 2307277, 2307341, 2307373, 2307405, 2307437, 2307469, 2307501, 2307609, 2307645, 2307701, 2307733, 2307765, 2307797, 2307829, 2307861, 2307893, 2307925, 2307957, 2308033, 2308065, 2308097, 2308129, 2308173, 2308209, 2308245, 2308281, 2308313, 2308349, 2308381, 2308417, 2308449, 2308485, 2308517, 2308549, 2308753, 2308789, 2308821, 2308853, 2308901, 2309133, 2313253, 2334085, 2334089, 2359461 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-39827 | 2359097, 2359205, 2359365, 2359749, 2359941, 2360209, 2360289, 2360369, 2360453, 2360533, 2360613, 2360765, 2360845, 2360953, 2361073, 2361153 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39828 | 2359101, 2359209, 2359369, 2359753, 2359945, 2360213, 2360293, 2360373, 2360457, 2360537, 2360617, 2360769, 2360849, 2360957, 2361077, 2361157 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39829 | 2359105, 2359213, 2359373, 2359757, 2359949, 2360217, 2360297, 2360377, 2360461, 2360541, 2360621, 2360773, 2360853, 2360961, 2361081, 2361161 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39830 | 2359109, 2359217, 2359377, 2359761, 2359953, 2360221, 2360301, 2360381, 2360465, 2360545, 2360625, 2360777, 2360857, 2360965, 2361085, 2361165 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39831 | 2359141, 2359249, 2359465, 2359797, 2360045, 2360253, 2360333, 2360413, 2360497, 2360577, 2360657, 2360809, 2360889, 2361001, 2361117, 2361197 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39832 | 2359113, 2359221, 2359381, 2359765, 2359957, 2360225, 2360305, 2360385, 2360469, 2360549, 2360629, 2360781, 2360861, 2360969, 2361089, 2361169 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39833 | 2359145, 2359253, 2359469, 2359801, 2360049, 2360257, 2360337, 2360417, 2360501, 2360581, 2360661, 2360813, 2360893, 2361005, 2361121, 2361201 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39834 | 2359149, 2359257, 2359473, 2359805, 2360053, 2360261, 2360341, 2360421, 2360505, 2360585, 2360665, 2360817, 2360897, 2361009, 2361125, 2361205 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39835 | 2359117, 2359225, 2359385, 2359769, 2359961, 2360229, 2360309, 2360389, 2360473, 2360553, 2360633, 2360785, 2360865, 2360973, 2361093, 2361173 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-39836 | 2307053, 2307089, 2307121, 2307153, 2307281, 2307285, 2307289, 2307293, 2307297, 2307345, 2307377, 2307409, 2307441, 2307473, 2307505, 2307617, 2307649, 2307705, 2307737, 2307769, 2307801, 2307833, 2307865, 2307897, 2307929, 2307961, 2308037, 2308069, 2308101, 2308133, 2308177, 2308213, 2308249, 2308285, 2308317, 2308353, 2308385, 2308421, 2308453, 2308489, 2308521, 2308553, 2308757, 2308793, 2308825, 2308857, 2308905, 2309137, 2313257, 2334053, 2334057, 2359389 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-40179 | 2266477 | opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-40200 | 2266709 | vault | musl |
| CVE-2026-40226 | 2334233, 2334249 | baseos, f5-fluentd | libsystemd-shared, libsystemd0 |
| CVE-2026-40228 | 2334237 | f5-fluentd | libsystemd-shared |
| CVE-2026-41080 | 2308629 | postgresql | expat-libs |
| CVE-2026-41316 | 2313261 | f5-fluentd | erb |
| CVE-2026-41602 | 2307653, 2307965, 2308909 | opentelemetry-collector-contri, vault, vault-init | github.com/apache/thrift |
| CVE-2026-41889 | 2307677, 2308009, 2308929 | opentelemetry-collector-contri, vault, vault-init | github.com/jackc/pgx/v5 |
| CVE-2026-41989 | 2309169 | baseos | libgcrypt20 |
| CVE-2026-42009 | 2309173 | baseos | libgnutls30t64 |
| CVE-2026-42010 | 2308581, 2309177 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-42011 | 2308633, 2309181 | baseos, postgresql | gnutls, libgnutls30t64 |
| CVE-2026-42012 | 2309185 | baseos | libgnutls30t64 |
| CVE-2026-42013 | 2309189 | baseos | libgnutls30t64 |
| CVE-2026-42014 | 2309193 | baseos | libgnutls30t64 |
| CVE-2026-42015 | 2309197 | baseos | libgnutls30t64 |
| CVE-2026-42151 | 2307657, 2308137, 2308861, 2313265 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42154 | 2307661, 2308141, 2308865, 2313269 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-42245 | 2313273 | f5-fluentd | net-imap |
| CVE-2026-42246 | 2313277 | f5-fluentd | net-imap |
| CVE-2026-42256 | 2313285 | f5-fluentd | net-imap |
| CVE-2026-42257 | 2313225 | f5-fluentd | net-imap |
| CVE-2026-42258 | 2313229 | f5-fluentd | net-imap |
| CVE-2026-42496 | 2361401 | baseos | perl-base |
| CVE-2026-42499 | 2307057, 2307093, 2307125, 2307157, 2307301, 2307305, 2307309, 2307313, 2307317, 2307349, 2307381, 2307413, 2307445, 2307477, 2307509, 2307621, 2307665, 2307709, 2307741, 2307773, 2307805, 2307837, 2307869, 2307901, 2307933, 2307969, 2308041, 2308073, 2308105, 2308145, 2308181, 2308217, 2308253, 2308289, 2308321, 2308357, 2308389, 2308425, 2308457, 2308493, 2308525, 2308557, 2308761, 2308797, 2308829, 2308869, 2308913, 2309141, 2313281, 2334061, 2334065, 2359393 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42502 | 2359069, 2359121, 2359177, 2359229, 2359397, 2359401, 2359405, 2359409, 2359413, 2359521, 2359549, 2359577, 2359605, 2359633, 2359661, 2359721, 2359773, 2359845, 2359873, 2359905, 2359965, 2360093, 2360121, 2360153, 2360181, 2360233, 2360313, 2360393, 2360477, 2360557, 2360637, 2360693, 2360729, 2360789, 2360869, 2360925, 2360977, 2361045, 2361097, 2361177 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-42504 | 2311649, 2311661, 2311673, 2311685, 2311713, 2311717, 2311721, 2311725, 2311729, 2311757, 2311769, 2311781, 2311793, 2311805, 2311817, 2311841, 2311853, 2311865, 2311877, 2311889, 2311901, 2311913, 2311925, 2311937, 2311949, 2311961, 2311973, 2311985, 2311997, 2312009, 2312021, 2312033, 2312045, 2312057, 2312069, 2312081, 2312093, 2312105, 2312117, 2312129, 2312141, 2312153, 2312165, 2312177, 2312189, 2312201, 2312213, 2312233, 2313297, 2334069, 2334073, 2359417 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42506 | 2359073, 2359125, 2359181, 2359233, 2359421, 2359425, 2359429, 2359433, 2359437, 2359525, 2359553, 2359581, 2359609, 2359637, 2359665, 2359725, 2359777, 2359849, 2359877, 2359909, 2359969, 2360097, 2360125, 2360157, 2360185, 2360237, 2360317, 2360397, 2360481, 2360561, 2360641, 2360697, 2360733, 2360793, 2360873, 2360929, 2360981, 2361049, 2361101, 2361181 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dwbld, f5-env-discovery, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, spk-csrc, spk-cwc | golang.org/x/net |
| CVE-2026-42507 | 2311653, 2311665, 2311677, 2311689, 2311733, 2311737, 2311741, 2311745, 2311749, 2311761, 2311773, 2311785, 2311797, 2311809, 2311821, 2311845, 2311857, 2311869, 2311881, 2311893, 2311905, 2311917, 2311929, 2311941, 2311953, 2311965, 2311977, 2311989, 2312001, 2312013, 2312025, 2312037, 2312049, 2312061, 2312073, 2312085, 2312097, 2312109, 2312121, 2312133, 2312145, 2312157, 2312169, 2312181, 2312193, 2312205, 2312217, 2312237, 2313301, 2334093, 2334097, 2359477 | baseos, cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crd-installer, crdupdater, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dwbld, f5-env-discovery, f5-eowyn-install, f5-fluentbit, f5-fluentd, f5-fqdn-resolver, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5-urlcat, f5dr-img, f5ing-tmm-pod-manager, f5ingress, init-certmgr, ocnos-img, opentelemetry-collector-contri, rabbit, spk-csrc, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2026-42508 | 2359129, 2359237, 2359441, 2359781, 2359973, 2360241, 2360321, 2360401, 2360485, 2360565, 2360645, 2360797, 2360877, 2360985, 2361105, 2361185 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-42602 | 2307669 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-42764 | 2334125, 2334185 | vault, vault-init | libcrypto3 |
| CVE-2026-42766 | 2334141, 2334201, 2334265 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-42767 | 2334145, 2334205, 2334269 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-42768 | 2334149, 2334209 | vault, vault-init | libcrypto3 |
| CVE-2026-42769 | 2334153, 2334213 | vault, vault-init | libcrypto3 |
| CVE-2026-42770 | 2334157, 2334217, 2334273 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-44024 | 2359917 | f5-fluentd | fluentd |
| CVE-2026-44025 | 2359977 | f5-fluentd | fluentd |
| CVE-2026-44160 | 2359981 | f5-fluentd | fluentd |
| CVE-2026-44161 | 2359985 | f5-fluentd | fluentd |
| CVE-2026-44503 | 2307973, 2308921 | vault, vault-init | github.com/microsoft/kiota-http-go |
| CVE-2026-44903 | 2307673, 2308149, 2308877, 2313289 | f5-coremond, f5-csm-qkview, f5-fluentd, opentelemetry-collector-contri | github.com/prometheus/prometheus |
| CVE-2026-45186 | 2316369 | postgresql | expat-libs |
| CVE-2026-45445 | 2334129, 2334189, 2334253 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-45446 | 2334161, 2334221, 2334277 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-45447 | 2334113, 2334173, 2334241 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-46595 | 2359133, 2359241, 2359445, 2359785, 2359989, 2360245, 2360325, 2360405, 2360489, 2360569, 2360649, 2360801, 2360881, 2360989, 2361109, 2361189 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46597 | 2359137, 2359245, 2359449, 2359789, 2359993, 2360249, 2360329, 2360409, 2360493, 2360573, 2360653, 2360805, 2360885, 2360993, 2361113, 2361193 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46598 | 2359153, 2359261, 2359481, 2359809, 2360057, 2360265, 2360345, 2360425, 2360509, 2360589, 2360669, 2360821, 2360901, 2361013, 2361129, 2361209 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-coremond, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, opentelemetry-collector-contri, spk-cwc | golang.org/x/crypto |
| CVE-2026-46680 | 2308561 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-47240 | 2334101 | f5-fluentd | net-imap |
| CVE-2026-47241 | 2334109 | f5-fluentd | net-imap |
| CVE-2026-47242 | 2334105 | f5-fluentd | net-imap |
| CVE-2026-47256 | 2359813 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-47262 | 2361017 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-48496 | 2359817 | opentelemetry-collector-contri | go.opentelemetry.io/ebpf-profiler |
| CVE-2026-4873 | 2308677, 2308957, 2309093 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-4878 | 2309209 | baseos | libcap2 |
| CVE-2026-49014 | 2316373 | postgresql | gdal |
| CVE-2026-5260 | 2309213 | baseos | libgnutls30t64 |
| CVE-2026-53488 | 2360997 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2026-54171 | 2360061 | f5-fluentd | excon |
| CVE-2026-5419 | 2309217 | baseos | libgnutls30t64 |
| CVE-2026-54297 | 2359997 | f5-fluentd | faraday |
| CVE-2026-5450 | 2308585, 2360001, 2360065 | f5-fluentd, postgresql | glibc, oj |
| CVE-2026-54500 | 2360065 | f5-fluentd | oj |
| CVE-2026-54502 | 2360001 | f5-fluentd | oj |
| CVE-2026-54592 | 2360005 | f5-fluentd | oj |
| CVE-2026-54896 | 2360009 | f5-fluentd | oj |
| CVE-2026-54897 | 2360013 | f5-fluentd | oj |
| CVE-2026-54898 | 2360017 | f5-fluentd | oj |
| CVE-2026-54899 | 2360021 | f5-fluentd | oj |
| CVE-2026-54900 | 2360025 | f5-fluentd | oj |
| CVE-2026-54901 | 2360029 | f5-fluentd | oj |
| CVE-2026-54902 | 2360033 | f5-fluentd | oj |
| CVE-2026-54903 | 2360037 | f5-fluentd | oj |
| CVE-2026-54904 | 2360041 | f5-fluentd | concurrent-ruby |
| CVE-2026-54905 | 2360069 | f5-fluentd | concurrent-ruby |
| CVE-2026-54906 | 2359921 | f5-fluentd | concurrent-ruby |
| CVE-2026-5545 | 2308681, 2308941, 2309033 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-55701 | 2359821 | opentelemetry-collector-contri | opentelemetry-collector-contri |
| CVE-2026-5704 | 2309221 | baseos | tar |
| CVE-2026-5773 | 2308637, 2308961, 2309097 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-5928 | 2308641 | postgresql | glibc |
| CVE-2026-5946 | 2308977 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5950 | 2308981 | f5-debug-sidecar | bind9-dnsutils |
| CVE-2026-5958 | 2309225 | baseos | sed |
| CVE-2026-6042 | 2266713 | vault | musl |
| CVE-2026-6253 | 2308685, 2308945, 2309037 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6276 | 2308645, 2308965, 2309101 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6429 | 2308689, 2308949, 2309041 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-6472 | 2308693, 2309045 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6473 | 2308649, 2309049 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6474 | 2308697, 2309053 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6475 | 2308653, 2309057 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6476 | 2308657, 2309061 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6477 | 2308661, 2309065 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6478 | 2308701, 2309069 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6479 | 2308665, 2309073 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6575 | 2308705, 2309077 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6637 | 2308669, 2309081 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6638 | 2308673, 2309085 | f5-fluentbit, postgresql | libpq5, postgresql |
| CVE-2026-6653 | 2361257 | f5-debug-sidecar | libxml2 |
| CVE-2026-6842 | 2316385 | f5-debug-sidecar | nano |
| CVE-2026-6843 | 2316389 | f5-debug-sidecar | nano |
| CVE-2026-7168 | 2308953, 2309089, 2316381 | f5-fluentbit, ocnos-img, postgresql | curl, libcurl4t64 |
| CVE-2026-7383 | 2334165, 2334225, 2334281 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-8084 | 2308709 | postgresql | gdal |
| CVE-2026-8086 | 2308713 | postgresql | gdal |
| CVE-2026-8087 | 2308717 | postgresql | gdal |
| CVE-2026-8088 | 2308721 | postgresql | gdal |
| CVE-2026-8212 | 2308725 | postgresql | gdal |
| CVE-2026-8213 | 2308729 | postgresql | gdal |
| CVE-2026-8286 | 2361233, 2361273, 2361309, 2361345, 2361381 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8376 | 2361405 | baseos | perl-base |
| CVE-2026-8458 | 2361237, 2361277, 2361313, 2361349, 2361385 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8924 | 2361241, 2361281, 2361317, 2361353, 2361389 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8927 | 2361221, 2361261, 2361297, 2361333, 2361369 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-8932 | 2361245, 2361285, 2361321, 2361357, 2361393 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
| CVE-2026-9076 | 2334169, 2334229, 2334285 | baseos, vault, vault-init | libcrypto3, libssl3t64 |
| CVE-2026-9547 | 2361249, 2361289, 2361325, 2361361, 2361397 | crd-installer, f5-debug-sidecar, f5-fluentbit, f5ingress, ocnos-img | curl, libcurl4t64 |
New features¶
(No new features)
Enhancements¶
(No enhancements)
Model changes¶
(No model changes)
Fixed issues¶
(No fixed changes)
Known issues¶
2230849-2¶
Helm installation fails when namespace length causes pre-install hook Job name to exceed Kubernetes 63-character limit
Component: fsm-config
Symptoms:
Installation of the f5ingress Helm chart may fail during the pre-install hook phase when deployed into namespaces with lengthy names.
During installation, Helm generates a pre-install hook Job whose name includes the namespace value. If the namespace is too long, the resulting Job name exceeds the Kubernetes 63-character label limit, causing the Job creation to fail and terminating the Helm installation.
The installation error may appear similar to:
INSTALLATION FAILED: failed pre-install: warning: Hook pre-install ... failed:
Job.batch "...prehook-job-<namespace>" is invalid:
spec.template.labels: Invalid value: "...": must be no more than 63 characters
Conditions: This issue occurs when:
The f5ingress Helm chart is installed
The deployment namespace name is longer than approximately 36 characters
The pre-install hook Job name is generated using the namespace value
The resulting Job name exceeds Kubernetes’ 63-character limit for label values
Impact: The Helm installation fails, preventing deployment of the f5ingress components in the affected namespace.
Workaround:
Deploy the Helm chart in a namespace whose name length allows the generated Job name to remain within the Kubernetes 63-character limit.
Alternatively, update the Helm template that generates the pre-install hook Job name to ensure the rendered name does not exceed Kubernetes’ 63-character limit.
metadata:
name: {{ printf "tmm-k8s-routes-prehook-job-%s" .Release.Namespace | trunc 63 | trimSuffix "-" }}
2390145-1¶
Egress traffic is disrupted during the upgrade process
Component: egress
Symptoms:
Egress traffic from the application pod will fail following the upgrade.
Conditions:
Version upgrade and TMM Pod restart.
Impact:
VXLAN interfaces and IP routes are wrongly provisioned on node and TMM, resulting in disruption of egress traffic.
Workaround:
Delete Egress CR and restart the cne-controller pod. Improved the APP-TMM pod IP mappings synchronization logic in BIG-IP Next for Kubernetes 2.3.0 and higher versions.
2390813-1¶
Controller fails to update TMM pod annotations after reconfiguring VLAN
Component: ingress
Symptoms:
Controller fails to update “k8s.v1.cni.cncf.io/network-status” annotation on TMM pods with its assigned selfIP from the internal VLAN.
Conditions:
If the internal VLAN is updated with change in selfIPs.
If controller deployment is updated with change in
MAX_ACTIVE_TMM_REPLICASenvironment variable.
Impact:
The k8s.v1.cni.cncf.io/network-status annotations on TMM pods show stale or missing selfIPs which result into egress traffic failure.
Workaround:
Delete the internal VLAN and recreate it.
2330929-2¶
ACL hardware stat intermittently out of sync
Component: Firewall (ACL)
Symptoms:
The hw_counter field in the fw_rule_stat tmctl table may intermittently fail to increment.
Conditions:
This occurs intermittently for gateway attached firewall policies.
Impact:
ACL hw_counter stat may report values lower than actual traffic counts.
Workaround:
Remove and reapply the configurations to reset the stats.
2183833-3¶
SIP egress CRD installation is not supported by FLO
Component: egress
Symptoms:
SIP egress CRD is not installed when installing BNK via the F5 Lifecycle Operator (FLO).
Conditions:
CRD installation is done using only FLO.
Impact:
SIP egress CRD will be missing in the CRDs installed using FLO and SIP egress functionality will not be supported.
Workaround:
Install SIP egress CRD using helm.
1617301¶
Bidirectional persistence traffic may fail in F5SPKIngressDiameter and F5SPKIngressHTTP2 deployments
Component: fsm-protocols
Symptoms: Outbound requests on new connections for bidirectional persistence configurations may fail for deployments that are utilizing F5SPKIngressHTTP2 or F5SPKIngressDiameter custom resources. Ingress traffic, outbound responses, and outbound requests utilizing the existing connection are unaffected.
Conditions:
SPK is configured with bidirectional persistence enabled in a F5SPKIngressHTTP2 Custom Resource route or a F5SPKIngressDiameter Custom Resource is configured.
An outbound request is sent on a new connection from an endpoint that is a part of a service configured for F5SPKIngressHTTP2 or F5SPKIngressDiameter.
SPK is configured with more than one f5-tmm pod.
Impact: Outbound requests may be dropped.
Workaround: Utilize only one f5-tmm pod replica for SPK instances requiring bidirectional persistence with F5SPKIngressHTTP2 or F5PSKIngressDiameter.
Fix Text: None
2188365¶
Egress packets dropped when forwarded to TMM after self IP removal
Component: egress
Symptoms: The device drops egress traffic when it forwards packets to TMM after removing the self IPs.
Conditions:
Traffic flows when packets go to TMMs that have self IPs.
The application pod sends egress traffic to the TMM.
Delete the existing vlan.yaml and update it to remove some internal VLAN self IPs.
Impact: The system should not forward traffic to TMMs without self IPs; however, it forwards egress packets to TMMs whose self IPs were removed and drops them.
Workaround: Wait a few minutes until OVN deletes the routing entries to TMMs without self IPs.
Fix Text: None
2391145-1¶
HTTP/2 egress traffic is not forwarded on OpenShift 4.18.39 with ConnectX-7 (CX7) adapters
Component: Drivers
Symptoms:
HTTP/2 client requests time out occurs when TMM does not forward HTTP/2 egress traffic to the backend server, even though the HTTP/2 virtual servers are configured and operational.
Conditions:
This issue occurs on OpenShift 4.18.39 deployments using NVIDIA ConnectX-7 (CX7) adapters with HTTP/2 egress traffic. The issue is not observed on equivalent ConnectX-6 (CX6) deployments.
Impact:
HTTP/2 egress connections fail, preventing client applications from communicating with backend HTTP/2 servers.