Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-82976	Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret	7.1 High	Nov 3, 2026
CVE-2026-120831	Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service	6.5 Medium	Nov 3, 2026
CVE-2026-120830	Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure	7.4 High	Nov 3, 2026
CVE-2026-120194	Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step	7.5 High	Oct 31, 2026
CVE-2026-115456	A flaw was found in gcc	3.7 Low	Oct 30, 2026
CVE-2026-115455	Gcc: stack overflow in std::bitset on libstdc++	6.5 Medium	Oct 30, 2026
CVE-2026-114691	Gcc: integer wrap in `std	5.9 Medium	Oct 30, 2026
CVE-2026-114690	Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std	6.2 Medium	Oct 30, 2026
CVE-2026-118593	Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)	5.9 Medium	Oct 30, 2026
CVE-2026-92092	A flaw was found in openshift-ansible	7.4 High	Oct 29, 2026
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Medium	Oct 29, 2026
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-85498	A flaw was found in polkit	3.5 Low	Oct 29, 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 High	Oct 28, 2026
CVE-2026-116497	Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon	5.5 Medium	Oct 26, 2026
CVE-2026-115424	A flaw was found in the OpenShift client oc	5.5 Medium	Oct 22, 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Low	Oct 21, 2026
CVE-2026-92824	Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts	6.2 Medium	Oct 21, 2026
CVE-2026-92822	Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml	6.2 Medium	Oct 21, 2026
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Medium	Oct 21, 2026

Other Red Hat products