Red Hat Security Advisory

RHSA-2026:54552

OpenShift Container Platform 4.19.43 packages and security update

Released 2026-08-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 cri-o-1.32.13-9.rhaos4.19.git2100f27.el9, cri-tools-1.32.0-6.el9, openshift-4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 +10

TI-2026-30782 CVE-2026-42499 · GHSA-xq5j-9r39-c3vf

MEDIUM 40

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00798 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3

TI-2026-28702 CVE-2026-39820 · GHSA-p9h5-jm8x-mjm5

MEDIUM 40

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00784 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3 CWE-770

TI-2026-26183 CVE-2026-33811 · GHSA-497x-jcxf-m478

MEDIUM 40

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00875 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3 CWE-415