Red Hat Security Advisory

RHSA-2026:0980

OpenShift Container Platform 4.18.32 bug fix and security update

Released 2026-02-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202601202224-0, rhcos-ppc64le-418.94.202601202224-0, rhcos-s390x-418.94.202601202224-0 +1

Fixes 2 records

TI-2025-05409 CVE-2025-5987 · GHSA-3pvj-q7qj-89fg

Libssh: invalid return code for chacha20 poly1305 with openssl backend

MEDIUM 41

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0173 Published 2025-07-07 Partial fix · 0.11.2, 0.11.1-5.el10_1 +13 CWE-393

TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674