Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-82976 | Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret | 7.1 High | Nov 3, 2026 |
| CVE-2026-120831 | Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service | 6.5 Medium | Nov 3, 2026 |
| CVE-2026-120830 | Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure | 7.4 High | Nov 3, 2026 |
| CVE-2026-120194 | Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step | 7.5 High | Oct 31, 2026 |
| CVE-2026-115456 | A flaw was found in gcc | 3.7 Low | Oct 30, 2026 |
| CVE-2026-115455 | Gcc: stack overflow in std::bitset on libstdc++ | 6.5 Medium | Oct 30, 2026 |
| CVE-2026-114691 | Gcc: integer wrap in `std | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-114690 | Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std | 6.2 Medium | Oct 30, 2026 |
| CVE-2026-118593 | Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099) | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-92092 | A flaw was found in openshift-ansible | 7.4 High | Oct 29, 2026 |
| CVE-2026-93009 | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93010 | A flaw was found in dnsmasq | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-93006 | A flaw was found in dnsmasq | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-93007 | A flaw was found in dnsmasq | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93011 | A flaw was found in dnsmasq | 5.3 Medium | Oct 29, 2026 |
| CVE-2026-93008 | Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations | 6.8 Medium | Oct 29, 2026 |
| CVE-2026-85498 | A flaw was found in polkit | 3.5 Low | Oct 29, 2026 |
| CVE-2026-109411 | Samba: access control bypass via vfs_ceph_rgw case-insensitive open | 8.1 High | Oct 28, 2026 |
| CVE-2026-116497 | Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon | 5.5 Medium | Oct 26, 2026 |
| CVE-2026-115449 | A flaw was found in libslirp | 3.5 Low | Oct 22, 2026 |
| CVE-2026-115424 | A flaw was found in the OpenShift client oc | 5.5 Medium | Oct 22, 2026 |
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-114236 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… | 3.3 Low | Oct 21, 2026 |
| CVE-2026-92824 | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92822 | A flaw was found in libmodulemd | 6.2 Medium | Oct 21, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat Enterprise Linux 9.6 Extended Update Support 503
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 460
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 450
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430