Red Hat Security Advisory

RHSA-2026:2661

OpenShift Container Platform 4.16.57 bug fix and security update

Released 2026-02-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-hyperkube-rhel9, registry.redhat.io/openshift4/ose-ironic-agent-rhel9 +2

Fixes 3 records

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321

TI-2025-40412 CVE-2025-65637 · GHSA-4f99-4q7p-p3gh

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using…

LOW 34

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2025-12-04 Partial fix · 1.8.3, 1.9.1 +1 CWE-400

TI-2025-35911 CVE-2025-58068 · GHSA-hw6f-rjfj-j7j7

Eventlet affected by HTTP request smuggling in unparsed trailers

LOW 34

Eventlet is a concurrent networking library for Python.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0042 Published 2025-08-29 Partial fix · 0.40.3 CWE-444