RHSA-2026:0326HighCVSS 8.6
Red Hat Security Advisory: OpenShift Container Platform 4.16.55 bug fix and security update
🔗 CVE IDs covered (7)
📋 Description
CVE-2025-5318 — libssh: out-of-bounds read in sftp_handle() CVE-2025-5914 — libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c CVE-2025-8677 — bind: Resource exhaustion via malformed DNSKEY handling CVE-2025-11234 — qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-40778 — bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40780 — bind: Cache poisoning due to weak PRNG CVE-2025-59375 — firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2026:0326
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2369131
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2370861
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2395108
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2401209
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405827
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405829
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405830
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0326.json