RHSA-2026:0332HighCVSS 8.6
Red Hat Security Advisory: OpenShift Container Platform 4.18.31 bug fix and security update
🔗 CVE IDs covered (6)
📋 Description
CVE-2025-8677 — bind: Resource exhaustion via malformed DNSKEY handling CVE-2025-9230 — openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap CVE-2025-11234 — qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-40778 — bind: Cache poisoning attacks with unsolicited RRs CVE-2025-40780 — bind: Cache poisoning due to weak PRNG CVE-2025-59375 — firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2026:0332
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2395108
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2396054
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2401209
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405827
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405829
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2405830
- externalhttps://issues.redhat.com/browse/OCPBUGS-64613
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0332.json