Red Hat Security Advisory

RHSA-2026:50758

OpenShift Container Platform 4.16.68 bug fix and security update

Released 2026-08-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9, registry.redhat.io/openshift4/ose-hypershift-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9 +2

TI-2026-13581 CVE-2026-16242 · GHSA-43hh-68v6-mf36

MEDIUM 50

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00918 Published 2026-07-20 Fixed in 1784905766, 1784945966 +13 CWE-306

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-30483 CVE-2026-42154 · GHSA-8rm2-7qqf-34qm

MEDIUM 40

Prometheus is an open-source monitoring system and time series database.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00813 Published 2026-05-04 Partial fix · 3.5.3, 3.11.3 +2 CWE-400

TI-2026-11539 CVE-2026-13676 · GHSA-4c8g-83qw-93j6

MEDIUM 40

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2026-06-29 Partial fix · 4.0.1, 3.1.3 +1 CWE-436

TI-2026-36513 CVE-2026-49332 · GHSA-f2m2-cc3f-h4j2

LOW 37

A flaw was found in openshift/oauth-proxy.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00531 Published 2026-07-28 Fixed in 1786458704, 1786477436 +9 CWE-436