Vulnerabilities of Red Hat Red Hat OpenStack Platform 17.1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 High	Oct 15, 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 High	Oct 8, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Medium	Sep 16, 2026
CVE-2026-75092	Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins	7.3 High	Sep 15, 2026
CVE-2026-84828	Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	6.5 Medium	Sep 10, 2026
CVE-2026-87872	A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection	6.8 Medium	Sep 9, 2026
CVE-2026-87874	A flaw was found in the memcached cache plugin of the community.general Ansible collection	8.1 High	Sep 9, 2026
CVE-2026-80158	A flaw was found in the ipa_getkeytab module of the community.general Ansible collection	5.5 Medium	Aug 26, 2026
CVE-2026-49759	Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to…	8.8 High	Jun 10, 2026
CVE-2026-11837	Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown	7.3 High	Jun 10, 2026
CVE-2026-50589	In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some…	5.3 Medium	Jun 4, 2026
CVE-2026-44393	An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0	7.4 High	Jun 4, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-42999	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-43000	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 High	May 27, 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 High	May 27, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 High	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Medium	May 22, 2026

Other Red Hat products