Red Hat Security Advisory

RHSA-2026:21690

OpenShift Container Platform 4.13.67 bug fix and security update

Released 2026-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202605271328-0

Fixes 7 records

TI-2026-34021 CVE-2026-46300 · GHSA-47jg-vqrv-5f8v

Linux kernel skb coalescing drops shared-frag marker

CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456

TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

MEDIUM 51

A flaw was found in libarchive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01092 Published 2026-03-30 Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190

TI-2026-31680 CVE-2026-43503 · GHSA-494p-q444-9xf7

net: skbuff: propagate shared-frag marker through frag-transfer helpers

MEDIUM 44

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propaga…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01987 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-691

TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

MEDIUM 41

A flaw was found in libarchive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01287 Published 2026-03-19 Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125

TI-2026-21585 CVE-2026-27135

nghttp2 Denial of service: Assertion failure due to the missing state validation

MEDIUM 40

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2026-03-18 Fixed in 1.68.1 CWE-617

TI-2026-27645 CVE-2026-35535 · GHSA-g5fc-f834-rcr2

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups…

LOW 35

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2026-04-03 Fixed CWE-271

TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp

Use of uninitialized resource in Ubuntu openssh

LOW 24

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.02375 Published 2026-03-12 Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908