Red Hat Security Advisory

RHSA-2026:37585

OpenShift Container Platform 4.22.5 bug fix and security update

Released 2026-07-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9, registry.redhat.io/openshift4/ose-thanos-rhel9

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-11539 CVE-2026-13676 · GHSA-4c8g-83qw-93j6

MEDIUM 40

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2026-06-29 Partial fix · 4.0.1, 3.1.3 +1 CWE-436

TI-2026-28761 CVE-2026-39882 · GHSA-w8rr-5gcm-pp58

LOW 23

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00199 Published 2026-04-08 Partial fix · 1.43.0, 0.19.0 CWE-789