Skip to main content
CVE-2026-111943VulnerabilityPublished Updated

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.53 packages update

Affects Red HatSource GCVE Database

0
Compare
Authoritative record:CVE-2026-111943· Medium

Not known to be exploited : upgrade Red Hat x509 to 1.27.3 or 1.26.10 when convenient.

Data as of 29 Oct 2026, 08:26 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 22% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 1.27.3, 1.26.10

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 21 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Upgrade crypto/x509 to 1.27.3 or 1.26.10.

Affected software

ProductAffectedFixed in
Go standard librarycrypto/x509Affected
  • >=1.27.0-0 <1.27.3
Fixed in
  • 1.27.3
Go standard librarycrypto/x509Affected
  • <1.26.10
Fixed in
  • 1.26.10
Gocrypto/x509pkg:golang/crypto/x509Other threatsAffected
  • <1.26.10
  • >=1.27.0-0 <1.27.3
Fixed in
  • 1.26.10
  • 1.27.3

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users of Red Hat OpenShift Container Platform 4.19 should upgrade to version 4.19.53 packages and container images when available via the official release channels. The vendor provides official documentation and tools (OpenShift Console and CLI) to facilitate the upgrade process. Since this is a bug fix advisory without specific security vulnerabilities, no additional mitigation actions are required beyond applying the update.

Description

Red Hat has released a bug fix advisory for OpenShift Container Platform 4.19.53, which includes updated RPM packages and container images. This update addresses several bugs but does not list any specific CVEs or security vulnerabilities. Users of OpenShift Container Platform 4.19 are advised to upgrade to these updated packages and images through the appropriate release channels. Instructions for upgrading clusters are provided by Red Hat.

References

Community reviews

Loading reviews…