Red Hat Security Advisory

RHSA-2026:56968

Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update

Released 2026-08-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Openshift Data Foundation 4.21 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +22

Fixes 2 records

TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8

Go JOSE affect by a panic in JWE decryption

MEDIUM 40

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00663 Published 2026-04-06 Partial fix · 4.1.4, 3.0.5 CWE-248

TI-2026-05546 CVE-2026-6322 · GHSA-v39h-62p7-jpjc

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

LOW 39

fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00512 Published 2026-05-05 Partial fix · 3.1.2, 2.4.1 CWE-436