Red Hat Security Advisory

RHSA-2026:34788

OpenShift Container Platform 4.20.28 bug fix and security update

Released 2026-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202607010620-0, rhcos-ppc64le-4.20.9.6.202607010620-0, rhcos-s390x-4.20.9.6.202607010620-0 +1

Fixes 3 records

TI-2026-33964 CVE-2026-46243 · GHSA-3mg7-pfmq-9qfv

smb: client: reject userspace cifs.spnego descriptions

HIGH 69

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upca…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00413 Published 2026-06-01 Fixed in 5.10.258, 5.15.209 +6 CWE-20

TI-2026-30398 CVE-2026-42010 · GHSA-m3r7-xjq8-gc4r

Gnutls: gnutls: authentication bypass via nul character in username

MEDIUM 44

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0105 Published 2026-05-07 Partial fix · 3.8.13, 3.8.10-4.el10_2 +47 CWE-170

TI-2026-30397 CVE-2026-42009 · GHSA-9gx7-g5hv-xjjj

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

MEDIUM 42

A flaw was found in gnutls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01335 Published 2026-05-18 Partial fix · 3.8.13, 3.8.10-4.el10_2 +48 CWE-475