Red Hat Security Advisory

RHSA-2026:43226

OpenShift Container Platform 4.15.67 bug fix and security update

Released 2026-07-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202607210244-0, rhcos-ppc64le-415.92.202607210244-0, rhcos-s390x-415.92.202607210244-0 +1

Fixes 3 records

TI-2026-04772 CVE-2026-5450 · GHSA-v898-xg3c-w4rj

scanf %mc off-by-one heap buffer overflow

HIGH 82

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00502 Published 2026-04-20 Partial fix CWE-122

TI-2026-01209 CVE-2026-1519 · GHSA-84m6-p53c-x4wp

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

MEDIUM 42

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01687 Published 2026-03-25 Fixed CWE-606

TI-2026-24346 CVE-2026-31790 · GHSA-vgxx-5xj5-q97x

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

MEDIUM 41

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +3 CWE-754