Red Hat Build of Kueue 1.4.3 Fixes a Go Vulnerability
Tech GuruQuick Answer
Red Hat published RHSA-2026:76145 for Red Hat build of Kueue 1.4 operator images. Match entitled deployments to the exact advisory relationships, apply Red Hat build of Kueue 1.4.3 at the architecture-specific immutable digests in RHSA-2026:76145, validate dependent operations, and preserve the change evidence.
Match Entitled Deployments And Apply The Supported Red Hat Content
What to do now: Inventory Red Hat build of Kueue 1.4 operator images, confirm the exact entitled branch and installed build or digest, apply the advisory-listed content, validate representative services, and document exceptions.
Last verified: 2026-10-06 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | Red Hat build of Kueue 1.4 operator images |
|---|---|
| Advisory | RHSA-2026:76145 |
| CVE | CVE-2026-84445 |
| Authoritative release date | 2026-10-05 19:25:13 UTC |
| Authority revision date | 2026-10-06 02:17:19 UTC |
| Affected versions | The supported Red Hat build of Kueue 1.4 operator images builds identified as affected by the advisory product-status relationships. |
| Fixed version | Red Hat build of Kueue 1.4.3 at the architecture-specific immutable digests in RHSA-2026:76145 |
| CVSS base score | 7.5 (CVSS v3.1) |
| CVSS severity | High |
| Exploitation status | Not stated by the authority; no exploitation claim is inferred. |
What Changed
Red Hat released Kueue 1.4.3 operator images to replace builds affected by CVE-2026-84445.
What To Validate Now
- Inventory. Locate Red Hat build of Kueue 1.4 operator images; record the installed build or digest, repository and entitlement, architecture, owner, exposure, dependencies, and maintenance group.
- Establish applicability. Compare each deployment with the product and fixed-status relationships in RHSA-2026:76145. Do not infer applicability from a component name or CVSS rating alone.
- Remediate. Apply Red Hat build of Kueue 1.4.3 at the architecture-specific immutable digests in RHSA-2026:76145 from the supported Red Hat channel for the exact product branch or architecture.
- Validate. Confirm the resulting package version or immutable digest, exercise representative authentication, application, platform, and recovery paths, monitor for regressions, and record the result.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Pin the authority-listed digest, preserve the prior deployment specification, and validate admission, quota, queueing, preemption, controller health, and workload scheduling before promotion. Preserve pre-change versions or digests, logs, installation output, validation evidence, and any rollback decision.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
