Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-58224 | Samba: ctdb fails to do integrity checking of received packets | 6.5 Medium | Aug 14, 2026 |
| CVE-2026-19617 | Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser | 5.5 Medium | Aug 14, 2026 |
| CVE-2026-19730 | Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives | 4.2 Medium | Aug 13, 2026 |
| CVE-2026-19548 | Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing | 5.5 Medium | Aug 12, 2026 |
| CVE-2026-19078 | A flaw was found in the oauth-server component | 4.3 Medium | Aug 11, 2026 |
| CVE-2026-50236 | An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers | 7.4 High | Aug 11, 2026 |
| CVE-2026-50237 | A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy | 7.4 High | Aug 11, 2026 |
| CVE-2026-72693 | Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login | 7.8 High | Aug 11, 2026 |
| CVE-2026-6426 | A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling | 4.4 Medium | Aug 10, 2026 |
| CVE-2026-15816 | A flaw was found in dracut | 7.5 High | Aug 7, 2026 |
| CVE-2026-18938 | A flaw was found in p11-kit | 6.2 Medium | Aug 7, 2026 |
| CVE-2026-19079 | Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation | 4.4 Medium | Aug 7, 2026 |
| CVE-2026-18839 | An integer underflow was found in the popt library when formatting help text for option tables that exceed the… | 2.2 Low | Aug 5, 2026 |
| CVE-2026-49331 | A flaw was found in openshift/oauth-proxy | 6.5 Medium | Aug 5, 2026 |
| CVE-2026-71227 | A flaw was found in libkcapi | 5.1 Medium | Aug 5, 2026 |
| CVE-2026-71226 | Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all… | 7.3 High | Aug 5, 2026 |
| CVE-2026-71225 | A flaw was found in libkcapi | 6.5 Medium | Aug 5, 2026 |
| CVE-2026-68743 | Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1 | 5.5 Medium | Aug 4, 2026 |
| CVE-2026-18739 | A flaw was found in popt, a command-line option parsing library | 2.5 Low | Aug 4, 2026 |
| CVE-2026-68744 | A flaw was found in SSSD | 3.3 Low | Aug 4, 2026 |
| CVE-2026-18477 | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape | 4.4 Medium | Aug 3, 2026 |
| CVE-2026-18508 | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite | 4.4 Medium | Aug 3, 2026 |
| CVE-2026-68742 | Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr | 5.5 Medium | Aug 3, 2026 |
| CVE-2026-58216 | An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd)… | 5.3 Medium | Jul 30, 2026 |
| CVE-2026-58222 | A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory… | 8.8 High | Jul 30, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430