Red Hat Security Advisory

RHSA-2026:2077

OpenShift Container Platform 4.20.14 bug fix and security update

Released 2026-02-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202602050328-0, rhcos-ppc64le-4.20.9.6.202602050328-0, rhcos-s390x-4.20.9.6.202602050328-0 +1

TI-2025-14107 CVE-2025-15467 · GHSA-wvhq-3h88-rf6g

CRITICAL 85

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.74793 Published 2026-01-27 Partial fix · 3.6.1, 3.5.5 +3 CWE-787