Red Hat Security AdvisoryRHSA-2026:6503
Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update
Released 2026-04-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
Fixes 5 records
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority LOW 32
A flaw was found in the Submariner project.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00507 · Published 2024-05-17 · Partial fix · 0.14.9, 0.15.5 +26 CWE-250
Priority LOW 31
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00597 · Published 2025-11-19 · Partial fix · 0.45.0 CWE-770
Priority LOW 31
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00546 · Published 2025-11-19 · Partial fix · 0.45.0 CWE-125
Priority LOW 21
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00425 · Published 2025-03-12 · Partial fix · 1.23.7, 1.24.1 +1 CWE-115
THREATIST.IORead the docs