Read the docs
Red Hat Security Advisory

RHSA-2026:26542

OpenShift Container Platform 4.13.68 bug fix and security update

Released 2026-06-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 7 records

TI-2026-31463 CVE-2026-43284 · GHSA-mmw8-mxmc-8w2r

xfrm: esp: avoid in-place decrypt on shared skb frags

Priority HIGH 84

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.94194 Published 2026-05-08 Fixed in 5.10.255, 5.15.205 +8 CWE-123
TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg

ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Priority MEDIUM 50

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-05-01 Partial fix · 5.10.253, 5.15.203 +6 CWE-121
TI-2026-27521 CVE-2026-35385 · GHSA-jgqr-738j-43cg

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an…

Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281