Red Hat Security AdvisoryRHSA-2026:14773
OpenShift Container Platform 4.15.64 bug fix and security update
Released 2026-05-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
Fixes 13 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.98114 · Published 2026-04-22 · Fixed in 5.10.254, 5.15.204 +6 CWE-669
Priority HIGH 69
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.0112 · Published 2026-02-10 · Partial fix · 1.6.55 CWE-122
Priority MEDIUM 51
A flaw was found in libarchive.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01092 · Published 2026-03-30 · Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190
Priority MEDIUM 41
A flaw was found in libarchive.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01287 · Published 2026-03-19 · Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00823 · Published 2026-03-18 · Fixed in 1.68.1 CWE-617
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00721 · Published 2026-03-13 · Partial fix · 3.7.7-5.el10_1, 3.7.7-5.el10_0 +33 CWE-835
Priority LOW 39
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01353 · Published 2026-02-27 · Fixed in 9.2.0073 CWE-86
Priority LOW 36
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00867 · Published 2026-03-24 · Fixed in 9.2.0202 CWE-78
Priority LOW 35
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00206 · Published 2026-02-27 · Fixed in 9.2.0077 CWE-122
Priority LOW 35
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the alloca…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00607 · Published 2026-01-27 · Partial fix · 3.6.1, 3.5.5 +4 CWE-787
Priority LOW 33
A Use-After-Free vulnerability has been discovered in GRUB's gettext module.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2025-11-18 · Fixed in 1:2.12-29.el10_1.2, 1:2.12-15.el10_0.2 +19 CWE-416
Priority LOW 29
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · User interaction · EPSS 0.00262 · Published 2026-02-06 · Partial fix · 9.1.2132 CWE-122
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.02375 · Published 2026-03-12 · Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908
THREATIST.IORead the docs