Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 High	Jun 18, 2026
CVE-2026-10649	Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression	8.6 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026
CVE-2026-48914	Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling	6.7 Medium	Jun 12, 2026
CVE-2026-11850	Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read	5.0 Medium	Jun 11, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-10843	A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS	7.2 High	Jun 4, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2026-5419	A flaw was found in gnutls	3.7 Low	Jun 1, 2026
CVE-2026-42965	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation	7.7 High	May 29, 2026
CVE-2026-46579	A flaw was found in the OpenShift Router	7.4 High	May 29, 2026
CVE-2026-1933	Samba: missing access check on reparse point operations	7.1 High	May 27, 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 High	May 26, 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Medium	May 26, 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 High	May 26, 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 High	May 26, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 High	May 7, 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 High	May 7, 2026

Other Red Hat products