Red Hat Security Advisory: etcd security, bug fix, and enhancement update

A security issue in etcd 3.3.11 involving improper authentication via gRPC-gateway was fixed. The vulnerability is identified as CVE-2018-16886 and relates to the AuthInfoFromTLS() function in auth/store.go. This update addresses the authentication flaw to improve security in the etcd key-value store.

• access.redhat.com/errata/RHSA-2019:0237 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• access.redhat.com/articles/3938261 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1651034 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1664290 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0237.json (opens in a new tab)

• Red Hat Security Advisory: webkit2gtk3 security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: opentelemetry-collector security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: libxslt security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: expat security update from RHELLowVulnerability2025-10-21
• Red Hat Security Advisory: grafana security update from RHELLowVulnerability2025-10-21