Red Hat Security AdvisoryRHSA-2026:65853
OpenShift Container Platform 4.18.55 security and extras update
Released 2026-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ingress-node-firewall-rhel9, registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator, registry.redhat.io/openshift4/nmstate-console-plugin-rhel9 +4
Fixes 3 records
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0084 · Published 2026-05-07 · Partial fix · 0.53.0, 1.25.10 +1 CWE-835
Priority MEDIUM 40
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00643 · Published 2026-07-23 · Partial fix · 5.0.8, 3.0.3 +2 CWE-400
