Red Hat Red Hat OpenStack Platform 16.2

• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-92982 High 8.5 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection 0.5%
• CVE-2026-92091 Medium 5.9 Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array 0.6%
• CVE-2026-84828 Medium 6.5 Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token 0.1%
• CVE-2026-84185 Medium 5.9 Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification 0.1%
• CVE-2026-80179 Medium 5.9 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens 0.3%
• CVE-2026-34956 Medium 5.9 Openvswitch: open vswitch: denial of service via malformed ftp epasv command 0.4%
• CVE-2023-6110 Medium 5.5 Openstack: deleting a non existing access rule deletes another existing access rule in it's scope 0.5%
• CVE-2024-8007 High 8.1 Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors 0.4%
• CVE-2024-43168 Medium 4.8 Unbound: heap-buffer-overflow in unbound 0.3%
• CVE-2024-43167 Low 2.8 Unbound: null pointer dereference in unbound 0.4%
• CVE-2024-7319 Medium 5.0 Openstack-heat: incomplete fix for cve-2023-1625 0.4%
• CVE-2024-4840 Medium 5.5 Rhosp-director: cleartext passwords exposed in logs 0.2%
• CVE-2024-4438 High 7.5 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform 0.8%
• CVE-2024-4437 High 7.5 Etcd: incomplete fix for cve-2021-44716 in openstack platform 0.8%
• CVE-2024-4436 High 7.5 Etcd: incomplete fix for cve-2022-41723 in openstack platform 0.8%
• CVE-2023-6725 Medium 5.5 Tripleo-ansible: bind keys are world readable 0.2%
• CVE-2024-1141 Medium 5.5 Glance-store: glance store access key logged in debug log level 0.2%
• CVE-2023-5366 High 7.1 Openvswitch don't match packets on nd_target field 0.4%
• CVE-2023-1633 Medium 6.6 Insecure barbican configuration file leaking credential 0.2%
• CVE-2023-1636 Medium 6.0 Incomplete container isolation 0.5%
• CVE-2023-1625 High 7.4 Information leak in api 0.7%
• CVE-2022-3261 Medium 4.4 Plain-text passwords saved in /var/log/messages 0.3%
• CVE-2023-3637 Medium 4.3 Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) 1.3%