Known vulnerabilities in Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-15028	Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header	3.9 Low	Jul 10, 2026
CVE-2026-14476	Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass	8.0 High	Jul 7, 2026
CVE-2026-14474	Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation	8.8 High	Jul 7, 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Medium	Jun 30, 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 High	Jun 30, 2026
CVE-2026-12610	Sssd: use-after-free crash in sssd' 'sssd_pam' process	6.4 Medium	Jun 30, 2026
CVE-2026-14164	Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()	7.5 High	Jun 30, 2026
CVE-2026-13757	P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	6.2 Medium	Jun 29, 2026
CVE-2026-13595	Util-linux: util-linux: heap use-after-free in libblkid nested partition probing	6.8 Medium	Jun 29, 2026
CVE-2026-12969	Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	5.3 Medium	Jun 23, 2026
CVE-2026-55654	Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	3.7 Low	Jun 23, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-12725	Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	5.9 Medium	Jun 22, 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 High	Jun 18, 2026
CVE-2026-10649	Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression	8.6 High	Jun 16, 2026
CVE-2026-42014	Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin	6.6 Medium	Jun 16, 2026
CVE-2026-48914	Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling	6.7 Medium	Jun 12, 2026
CVE-2026-11850	Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read	5.0 Medium	Jun 11, 2026
CVE-2026-11332	Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution	7.8 High	Jun 5, 2026
CVE-2026-10843	A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS	7.2 High	Jun 4, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2026-5419	Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal	3.7 Low	Jun 1, 2026
CVE-2026-42965	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation	7.7 High	May 29, 2026
CVE-2026-46579	A flaw was found in the OpenShift Router	7.4 High	May 29, 2026

Other Red Hat products