Red Hat Security AdvisoryRHSA-2026:40765
OpenShift Container Platform 4.19.39 bug fix and security update
Released 2026-07-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
Fixes 2 records
Priority MEDIUM 43
shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00793 · Published 2026-05-22 · Partial fix · 1.8.4 CWE-77
Priority MEDIUM 40
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00692 · Published 2026-06-29 · Partial fix · 4.0.1, 3.1.3 +1 CWE-436
