Red Hat Security Advisory

RHSA-2026:34791

OpenShift Container Platform 4.20.28 bug fix and security update

Released 2026-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-csi-external-provisioner-rhel9

TI-2026-27599 CVE-2026-35469 · GHSA-pc3f-x583-g7j2

MEDIUM 45

spdystream is a Go library for multiplexing streams over SPDY connections.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00656 Published 2026-04-16 Partial fix · 0.5.1 CWE-770

TI-2026-08149 CVE-2026-9277 · GHSA-w7jw-789q-3m8p

MEDIUM 43

shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00793 Published 2026-05-22 Partial fix · 1.8.4 CWE-77