Red Hat Security AdvisoryRHSA-2026:2974
OpenShift Container Platform 4.14.62 bug fix and security update
Released 2026-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202602171627-0, rhcos-ppc64le-414.92.202602171627-0, rhcos-s390x-414.92.202602171627-0 +1
Fixes 5 records
Priority CRITICAL 85
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.74793 · Published 2026-01-27 · Partial fix · 3.6.1, 3.5.5 +3 CWE-787
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-10-31 · Partial fix · 1.2.0, 2.13.4 CWE-400
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0038 · Published 2025-12-03 · Partial fix · 1.6.52 CWE-125
Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2025-09-30 · Partial fix · 3.5.4, 3.4.3 +5 CWE-125
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00346 · Published 2025-11-26 · Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190
THREATIST.IORead the docs