Red Hat Security AdvisoryRHSA-2026:5907
OpenShift Container Platform 4.17.52 bug fix and security update
Released 2026-04-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator, registry.redhat.io/openshift4/ose-ironic-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
Fixes 3 records
Priority HIGH 72
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-02-11 · Partial fix · 6.14.0, 8.17.2 +1 CWE-1333
Priority MEDIUM 44
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00652 · Published 2026-01-19 · Partial fix · 10.7.2, 10.9.1 +1 CWE-290
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
THREATIST.IORead the docs