Red Hat Security Advisory

RHSA-2026:29863

OpenShift Container Platform 4.19.36 bug fix and security update

Released 2026-07-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202606241344-0, rhcos-ppc64le-4.19.9.6.202606241344-0, rhcos-s390x-4.19.9.6.202606241344-0 +1

Fixes 6 records

TI-2026-34052 CVE-2026-46331 · GHSA-cr2w-747q-47qc

net/sched: fix pedit partial COW leading to page cache corruption

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key l…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00639 Published 2026-06-16 Fixed in 5.10.260, 5.15.211 +9 CWE-190

TI-2026-03832 CVE-2026-4408 · GHSA-jg8v-92xc-cx65

Samba: remote code execution in samr

MEDIUM 48

A flaw was found in Samba.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2026-05-28 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78

TI-2026-01209 CVE-2026-1519 · GHSA-84m6-p53c-x4wp

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

MEDIUM 42

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01687 Published 2026-03-25 Fixed CWE-606

TI-2026-02601 CVE-2026-3012 · GHSA-59rx-q76w-hqrw

Samba: group policy certificate enrollment uses http:// without validation

LOW 36

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

CVSS 3.1HIGH 8.0 Adjacent network No auth No interaction EPSS 0.00261 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345

TI-2026-01597 CVE-2026-1933 · GHSA-c866-5hw6-cqf9

Samba: missing access check on reparse point operations

LOW 33

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00862 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284

TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280