Red Hat Security AdvisoryRHSA-2026:4419
OpenShift Container Platform 4.15.62 bug fix and security update
Released 2026-03-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202603101737-0, rhcos-ppc64le-415.92.202603101737-0, rhcos-s390x-415.92.202603101737-0 +1
Fixes 5 records
Priority CRITICAL 85
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.74793 · Published 2026-01-27 · Partial fix · 3.6.1, 3.5.5 +3 CWE-787
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-10-31 · Partial fix · 1.2.0, 2.13.4 CWE-400
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0038 · Published 2025-12-03 · Partial fix · 1.6.52 CWE-125
Priority LOW 37
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02006 · Published 2024-03-10 · Fixed CWE-776
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00346 · Published 2025-11-26 · Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190
THREATIST.IORead the docs