Red Hat Security AdvisoryRHSA-2026:57408
OpenShift Container Platform 4.19.44 bug fix and security update
Released 2026-08-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9, registry.redhat.io/openshift4/ose-cli-rhel9 +9
Fixes 9 records
Priority MEDIUM 41
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0067 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-863
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-04-06 · Partial fix · 4.1.4, 3.0.5 CWE-248
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0084 · Published 2026-05-07 · Partial fix · 0.53.0, 1.25.10 +1 CWE-835
Priority LOW 39
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-05-22 · Partial fix · 0.52.0 CWE-704
Priority LOW 34
A flaw was found in the OpenShift Router.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00396 · Published 2026-05-29 · Partial fix · 1789938693, 1788578875 +4 CWE-918
Priority LOW 29
Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00163 · Published 2026-06-15 · Partial fix · 5.2.5 CWE-346
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00223 · Published 2026-05-22 · Partial fix · 0.55.0 CWE-1021
Priority LOW 25
OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00408 · Published 2026-07-10 · Partial fix · 29.0.6, 32.0.2 +2 CWE-862
Priority LOW 22
HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00251 · Published 2026-07-08 · Partial fix · 0.6.0 CWE-770
THREATIST.IORead the docs