Red Hat Security Advisory: Submariner v0.23 security fixes and container updates

Submariner v0.23, a Kubernetes operator facilitating multi-cluster service connectivity, has multiple security issues addressed in this Red Hat advisory (RHSA-2026:85227). The update includes security fixes for several CVEs (CVE-2026-32936, CVE-2026-35579, CVE-2026-63209, CVE-2026-66780 through CVE-2026-66788) and container image updates across multiple architectures. The advisory also resolves downstream-specific issues related to documentation and installation methods. The vulnerabilities impact Red Hat Advanced Cluster Management for Kubernetes v2.16. The vendor provides updated container images and documentation to remediate these issues.

The security issues fixed in Submariner v0.23 affect the integrity and security of cross-cluster connectivity in Kubernetes environments managed by Red Hat Advanced Cluster Management for Kubernetes. The advisory rates the impact as Important, indicating significant security concerns that could affect cluster networking and service communication. No known exploits in the wild have been reported. The vulnerabilities span multiple CVEs, suggesting a broad range of potential security weaknesses addressed by this update.

Red Hat has released updated Submariner v0.23 container images and documentation as part of Red Hat Advanced Cluster Management for Kubernetes v2.16 to address these security issues. Users should apply these updates promptly by following the vendor's official guidance and using the updated container images referenced in the advisory. The vendor manages remediation through these official fixes. No additional mitigation steps are indicated beyond applying the provided updates.