Red Hat Security AdvisoryRHSA-2026:40762
OpenShift Container Platform 4.19.39 bug fix and security update
Released 2026-07-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202607151909-0, rhcos-ppc64le-4.19.9.6.202607151909-0, rhcos-s390x-4.19.9.6.202607151909-0 +1
Fixes 10 records
Priority HIGH 82
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-04-20 · Partial fix CWE-122
Priority MEDIUM 50
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08849 · Published 2026-05-11 · Partial fix · 2.92rel2
Priority MEDIUM 44
A flaw was found in gnutls.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0105 · Published 2026-05-07 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +47 CWE-170
Priority MEDIUM 43
A flaw was found in libgnutls.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00769 · Published 2026-05-26 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-126
Priority MEDIUM 42
A flaw was found in gnutls.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-05-26 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +41 CWE-295
Priority MEDIUM 42
A flaw was found in gnutls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01335 · Published 2026-05-18 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +48 CWE-475
Priority MEDIUM 40
A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00812 · Published 2026-05-11 · Partial fix · 2.92rel2
Priority LOW 35
A flaw was found in gnutls.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00475 · Published 2026-05-07 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +41 CWE-295
Priority LOW 34
An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01784 · Published 2026-05-11 · Partial fix · 2.92rel2
Priority LOW 33
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06411 · Published 2026-05-11 · Partial fix · 2.92rel2
THREATIST.IORead the docs