Vulnerabilities of Red Hat Red Hat OpenStack Platform 17.1 for RHEL 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-24708	An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1	8.2 High	Feb 18, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2023-6110	A flaw was found in OpenStack	5.5 Medium	Nov 17, 2024
CVE-2024-9902	Ansible-core: ansible-core user may read/write unauthorized content	6.3 Medium	Nov 6, 2024
CVE-2024-8007	A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director	8.1 High	Aug 21, 2024
CVE-2024-4840	An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP…	5.5 Medium	May 13, 2024
CVE-2024-4438	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for…	7.5 High	May 8, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2023-6725	An access-control flaw was found in the OpenStack Designate component where private configuration information…	5.5 Medium	Mar 15, 2024
CVE-2024-1141	A vulnerability was found in python-glance-store	5.5 Medium	Feb 1, 2024
CVE-2023-5625	A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy,…	5.3 Medium	Nov 1, 2023

Other Red Hat products