{"id":"INC-redhat-rgf6sx9lcjyd","kind":"incident","aliases":[],"related":[],"title":"Red Hat: Quay.io Push/Pull Degraded","description":"On April 21, a routine production deployment included a dependency upgrade that exposed a latent incompatibility, causing Quay.io application pods to crash on startup. Image pulls and pushes were fully unavailable for approximately 12 minutes before the team failed over to a secondary region, restoring pulls. Pushes remained unavailable for approximately 70 additional minutes while the deployment was reverted and traffic was incrementally shifted back to the primary region. We are enabling staging parity for all runtime features, improving automated rollback mechanisms, and isolating observability subsystems from the critical request path to prevent recurrence.","summary":"A routine production deployment of Quay.io, Red Hat's hosted container registry, included a dependency upgrade that crashed application pods on startup. Image pulls were down for about 12 minutes and pushes for about 70 more minutes before the service was restored.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Red Hat","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["containers","incident","quay.io","red-hat","redhat","security","vendor"],"not_affected_if":["self-hosted-registry"],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-04-21T22:50:02+00:00","first_seen_at":"2026-11-14T01:28:06+00:00","triaged_at":"2026-11-14T01:29:39+00:00","updated_at":"2026-11-14T01:29:39+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-14T01:29:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Red Hat Quay.io: image pull and push outage after a faulty deployment","impact":"low","summary":"A routine production deployment of Quay.io, Red Hat's hosted container registry, included a dependency upgrade that crashed application pods on startup. Image pulls were down for about 12 minutes and pushes for about 70 more minutes before the service was restored.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["quay.io","containers","red-hat"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Image pulls and pushes to quay.io fail during the outage","analyst_note":"","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["self-hosted-registry"],"who_is_affected":"This was an availability incident in Red Hat's hosted Quay.io service, not a vulnerability in software that customers run. Teams that pull images from quay.io could have seen failed pulls and pushes during the outage window. The sources do not describe any action for customers.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000677,"input_tokens":4649,"output_tokens":425,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'12':49B,96C '21':65C '70':55B,114C 'addit':115C 'applic':39B,81C 'approxim':95C,113C 'april':64C 'autom':142C 'back':127C 'caus':79C 'contain':12B,31B 'crash':38B,84C 'critic':151C 'degrad':5A 'depend':35B,72C 'deploy':24B,69C,119C 'enabl':134C 'expos':75C 'fail':101C 'featur':140C 'fulli':92C 'hat':2A,11A,17B,28B 'host':30B 'imag':43B,87C 'improv':141C 'inc':7A 'inc-redhat-rgf6sx9lcjyd':6A 'incid':13B 'includ':33B,70C 'incompat':78C 'increment':125C 'isol':146C 'latent':77C 'mechan':144C 'minut':50B,57B,97C,116C 'observ':147C 'pariti':136C 'path':153C 'pod':40B,82C 'prevent':155C 'primari':130C 'product':23B,68C 'pull':44B,88C,108C 'push':52B,90C,109C 'push/pull':4A 'quay.io':3A,14B,26B,80C 'recurr':156C 'red':1A,10A,16B,27B 'red-hat':15B 'redhat':8A,18B 'region':106C,131C 'registri':32B 'remain':110C 'request':152C 'restor':62B,107C 'revert':121C 'rgf6sx9lcjyd':9A 'rollback':143C 'routin':22B,67C 'runtim':139C 'secondari':105C 'secur':19B 'servic':60B 'shift':126C 'stage':135C 'startup':42B,86C 'subsystem':148C 'team':100C 'traffic':123C 'unavail':93C,111C 'upgrad':36B,73C 'vendor':20B","nicknames":[],"mitigations":[],"who_affected":"This was an availability incident in Red Hat's hosted Quay.io service, not a vulnerability in software that customers run. Teams that pull images from quay.io could have seen failed pulls and pushes during the outage window. The sources do not describe any action for customers.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["hat","redhat"],"ptokens":["hat","red"],"labels":["containers","high","incident","quayio","redhat","security","vendor"],"campaign_type":null,"search_a":"'degrad':5A 'hat':2A,11A 'inc':7A 'inc-redhat-rgf6sx9lcjyd':6A 'push/pull':4A 'quay.io':3A 'red':1A,10A 'redhat':8A 'rgf6sx9lcjyd':9A","search_b":"'12':49B '70':55B 'applic':39B 'contain':12B,31B 'crash':38B 'depend':35B 'deploy':24B 'hat':17B,28B 'host':30B 'imag':43B 'incid':13B 'includ':33B 'minut':50B,57B 'pod':40B 'product':23B 'pull':44B 'push':52B 'quay.io':14B,26B 'red':16B,27B 'red-hat':15B 'redhat':18B 'registri':32B 'restor':62B 'routin':22B 'secur':19B 'servic':60B 'startup':42B 'upgrad':36B 'vendor':20B","search_c":"'12':96C '21':65C '70':114C 'addit':115C 'applic':81C 'approxim':95C,113C 'april':64C 'autom':142C 'back':127C 'caus':79C 'crash':84C 'critic':151C 'depend':72C 'deploy':69C,119C 'enabl':134C 'expos':75C 'fail':101C 'featur':140C 'fulli':92C 'imag':87C 'improv':141C 'includ':70C 'incompat':78C 'increment':125C 'isol':146C 'latent':77C 'mechan':144C 'minut':97C,116C 'observ':147C 'pariti':136C 'path':153C 'pod':82C 'prevent':155C 'primari':130C 'product':68C 'pull':88C,108C 'push':90C,109C 'quay.io':80C 'recurr':156C 'region':106C,131C 'remain':110C 'request':152C 'restor':107C 'revert':121C 'rollback':143C 'routin':67C 'runtim':139C 'secondari':105C 'shift':126C 'stage':135C 'startup':86C 'subsystem':148C 'team':100C 'traffic':123C 'unavail':93C,111C 'upgrad':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-04-21T22:50:02+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"redhat:rgf6sx9lcjyd","url":"https://stspg.io/3hmzxvcjvndl","severity":"high","published_at":"2026-04-21T22:50:02+00:00","modified_at":"2026-05-15T17:18:29+00:00","first_seen_at":"2026-11-14T01:28:06+00:00","fetched_at":"2026-11-14T02:04:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}