Red Hat Security AdvisoryRHSA-2026:47728
OpenShift Container Platform 4.17.56 bug fix and security update
Released 2026-08-06 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9 +7
Fixes 10 records
Priority MEDIUM 50
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00918 · Published 2026-07-20 · Fixed in 1784905766, 1784945966 +13 CWE-306
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01619 · Published 2026-03-20 · Partial fix · 1.79.3 CWE-285
Priority MEDIUM 45
spdystream is a Go library for multiplexing streams over SPDY connections.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00656 · Published 2026-04-16 · Partial fix · 0.5.1 CWE-770
Priority MEDIUM 44
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00577 · Published 2026-02-20 · Partial fix · 10.2.1, 9.0.6 +6 CWE-1333
Priority MEDIUM 40
Prometheus is an open-source monitoring system and time series database.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00813 · Published 2026-05-04 · Partial fix · 3.5.3, 3.11.3 +2 CWE-400
Priority MEDIUM 40
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00692 · Published 2026-06-29 · Partial fix · 4.0.1, 3.1.3 +1 CWE-436
Priority MEDIUM 40
Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00789 · Published 2026-06-17 · Partial fix · 6.26.0, 7.28.0 +2 CWE-400
Priority LOW 35
A flaw was found in the OpenShift Router.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00447 · Published 2026-05-29 · Fixed in 1784323891, 1784056734 +9 CWE-287
Priority LOW 35
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00459 · Published 2026-06-17 · Partial fix · 7.28.0, 8.5.0 CWE-295
Priority LOW 31
follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00486 · Published 2026-04-21 · Partial fix · 1.16.0 CWE-200
THREATIST.IORead the docs