Red Hat Security Advisory

RHSA-2026:4465

OpenShift Container Platform 4.16.58 bug fix and security update

Released 2026-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202603112010-0, rhcos-ppc64le-416.94.202603112010-0, rhcos-s390x-416.94.202603112010-0 +1

Fixes 2 records

TI-2025-05586 CVE-2025-6176 · GHSA-2qfp-q593-8484

Brotli decompression bomb DoS in scrapy/scrapy

HIGH 72

Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2025-10-31 Partial fix · 1.2.0, 2.13.4 CWE-400

TI-2024-18991 CVE-2024-28757 · GHSA-ch5v-h69f-mxc8

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use…

LOW 37

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02006 Published 2024-03-10 Fixed CWE-776