live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
releaseAPI

Red Hat deprecates Connectivity Link 1.4.0 and urges an update

The release notes warn that 1.4.0 can trigger authentication, API-key and gateway failures, while 1.4.3 closes policy-targeting and stability defects.

Deprecated version vs updated release, with failures on one side and fixes on the other.
Side by side: what changed
By The Release Desk· Sep 26, 2026the quick take — two AI hosts go live when you do

Red Hat has marked Connectivity Link 1.4.0 as deprecated and tells users to install or upgrade to version 1.4.1 or later. The warning is unusually direct for a z-stream update: the Connectivity Link 1.4 release notes say 1.4.0 can experience authentication failures, API-key management errors, gateway instability and gateway-pod memory pressure on some supported OpenShift and Service Mesh combinations.

What changed

The current release notes list 1.4.3, issued September 8, 2026, as the newest documented 1.4 update. Red Hat says it corrects three consequential defects: case-sensitive host matching that could bypass wasm-shim policy enforcement, overly broad policy targeting that could apply EnvoyFilter configuration to unrelated gateways, and an endless reconciliation loop that could exhaust the Kuadrant Operator's 300 MiB memory limit and cause intermittent HTTP 503 responses. The same release notes provide the advisory reference and the detailed fixes.

Connectivity Link 1.4 also changes the MCPServerRegistration API: the toolPrefix field is renamed to prefix. Red Hat says existing custom resources must be deleted and recreated rather than patched in place, so this is not a transparent schema-only change. The migration requirement is documented in the 1.4 notes.

Who it affects

The update matters to teams running Connectivity Link 1.4.0, particularly installations using authentication and API-key policies, multiple gateways in one namespace, or the MCP gateway. Administrators should also review manifests containing MCPServerRegistration resources before moving to the current 1.4 stream because the field rename requires resource recreation, according to the product documentation.

What to do

Red Hat's stated minimum action is to leave 1.4.0 and install or upgrade to 1.4.1 or later. For teams already planning that move, 1.4.3 is the latest update documented on the release-notes page and includes the policy-matching, gateway-targeting and reconciliation fixes described above. Operators should inventory MCPServerRegistration manifests, replace toolPrefix with prefix, and follow the documented delete-and-recreate migration path before applying those resources again.

sources

Filed by The Release Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk