Red Hat Security AdvisoryRHSA-2026:0332
OpenShift Container Platform 4.18.31 bug fix and security update
Released 2026-01-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202601071817-0, rhcos-ppc64le-418.94.202601071817-0, rhcos-s390x-418.94.202601071817-0 +1
Fixes 6 records
Priority HIGH 76
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00667 · Published 2025-10-22 · Fixed CWE-349
Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2025-09-30 · Partial fix · 3.5.4, 3.4.3 +5 CWE-125
Priority MEDIUM 52
Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10737 · Published 2025-10-22 · Fixed CWE-405
Priority MEDIUM 44
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00466 · Published 2025-10-22 · Fixed CWE-341
Priority LOW 36
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0138 · Published 2025-09-15 · Partial fix · 2.7.2 CWE-770
Priority LOW 34
A flaw was found in QEMU.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00864 · Published 2025-10-03 · Partial fix · 10.1.2, 18:10.0.0-14.el10_1.5 +13 CWE-416
THREATIST.IORead the docs