Red Hat Security Advisory

RHSA-2026:68552

OpenShift Container Platform 4.22.15 bug fix and security update

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47

Fixes 4 records

TI-2026-56824 CVE-2026-82417 · GHSA-4mjr-xmp4-gh2g

qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property

HIGH 67

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00396 Published 2026-08-29 Partial fix · 6.16.0 CWE-248

TI-2026-29801 CVE-2026-41178 · GHSA-5wrp-cwcj-q835

OpenTelemetry-Go's baggage parsing no longer caps raw header length

MEDIUM 63

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2026-06-04 Partial fix · 1.42.0, 1.44.0 CWE-789

TI-2026-30787 CVE-2026-42504 · GHSA-h524-452v-82p9

Quadratic complexity in WordDecoder.DecodeHeader in mime

MEDIUM 40

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2026-06-02 Partial fix · 1.25.11, 1.26.4 CWE-407

TI-2026-26186 CVE-2026-33814

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

MEDIUM 40

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-05-07 Partial fix · 0.53.0, 1.25.10 +1 CWE-835