Red Hat Security Advisory

RHSA-2026:57545

OpenShift Container Platform 4.20.35 bug fix and security update

Released 2026-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9, registry.redhat.io/openshift4/ose-console-rhel9 +4

Fixes 7 records

TI-2026-10456 CVE-2026-12143 · GHSA-hmw2-7cc7-3qxx

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

HIGH 77

form-data is a library for creating readable multipart/form-data streams.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00669 Published 2026-06-12 Partial fix · 2.5.6, 3.0.5 +1 CWE-93

TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m

js-yaml: YAML merge-key chains can force quadratic CPU consumption

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-07-08 Partial fix · 3.15.0, 4.3.0 CWE-407

TI-2026-21590 CVE-2026-27140 · GHSA-5w89-2c2x-6x66

Code execution vulnerability in SWIG code generation in cmd/go

MEDIUM 41

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0067 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-863

TI-2026-26186 CVE-2026-33814

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

MEDIUM 40

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-05-07 Partial fix · 0.53.0, 1.25.10 +1 CWE-835

TI-2026-12072 CVE-2026-14257 · GHSA-mh99-v99m-4gvg

brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash

MEDIUM 40

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00643 Published 2026-07-23 Partial fix · 5.0.8, 3.0.3 +2 CWE-400

TI-2026-34256 CVE-2026-46597 · GHSA-q4h4-gmj2-qvw2

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

LOW 39

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00473 Published 2026-05-22 Partial fix · 0.52.0 CWE-704

TI-2026-12143 CVE-2026-14362 · GHSA-6r3r-6rpf-v429

Denial of service via crafted push/pull gossip message in memberlist

LOW 22

HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00251 Published 2026-07-08 Partial fix · 0.6.0 CWE-770