Red Hat Security Advisory

RHSA-2026:1539

OpenShift Container Platform 4.19.23 bug fix and security update

Released 2026-02-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202601260820-0, rhcos-aarch64-9.6.20260123-0, rhcos-ppc64le-4.19.9.6.202601260820-0 +5

Fixes 3 records

TI-2025-10151 CVE-2025-11083 · GHSA-fmx9-hrmg-3x9v

GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

MEDIUM 55

A vulnerability has been found in GNU Binutils 2.45.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00261 Published 2025-09-27 Partial fix CWE-119

TI-2025-05409 CVE-2025-5987 · GHSA-3pvj-q7qj-89fg

Libssh: invalid return code for chacha20 poly1305 with openssl backend

MEDIUM 41

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0173 Published 2025-07-07 Partial fix · 0.11.2, 0.11.1-5.el10_1 +13 CWE-393

TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674