Red Hat Security AdvisoryRHSA-2026:4434
OpenShift Container Platform 4.19.26 bug fix and security update
Released 2026-03-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
Fixes 9 records
Priority MEDIUM 44
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00652 · Published 2026-01-19 · Partial fix · 10.7.2, 10.9.1 +1 CWE-290
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02292 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6 CWE-770
Priority MEDIUM 40
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
CVSS 3.1HIGH 8.6· Local · No auth · User interaction · EPSS 0.00531 · Published 2026-02-05 · Partial fix · 1.24.13, 1.25.7 CWE-94
Priority LOW 37
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0061 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6
Priority LOW 34
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2025-12-04 · Partial fix · 1.8.3, 1.9.1 +1 CWE-400
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 31
Cancelling a query (e.g.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.00406 · Published 2025-08-07 · Partial fix · 1.23.12, 1.24.6 CWE-362
Priority LOW 30
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00738 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6 CWE-770
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00443 · Published 2025-10-29 · Partial fix · 1.24.8, 1.25.2
THREATIST.IORead the docs