Red Hat Security AdvisoryRHSA-2026:54769
OpenShift Container Platform 4.22.10 bug fix and security update
Released 2026-08-18 · Red Hat rating Important · View on Red Hat →
Fixes 20 records
Priority HIGH 72
A double free issue has been identified in libarchive's RAR5 reader.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00792 · Published 2026-06-30 · Partial fix · 3.7.7-10.el10_2, 3.7.7-5.el10_0.1 +58 CWE-415
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.003 · Published 2026-07-08 · Partial fix · 10.4 CWE-416
Priority MEDIUM 41
A flaw was found in SSSD's LDAP sudo provider.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-1188
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00216 · Published 2026-07-09 · Partial fix · 9.2.0736 CWE-94
Priority LOW 38
A path traversal flaw was found in SSSD's AD GPO provider.
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.00668 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-23
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00137 · Published 2026-07-09 · Partial fix · 9.2.0735 CWE-94
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00145 · Published 2026-06-25 · Fixed in 9.2.0699 CWE-94
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
CVSS 4.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2026-06-29 · Partial fix · 2.4.0 CWE-59
Priority LOW 37
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00748 · Published 2026-05-20 · Partial fix · 1.25.1 CWE-407
Priority LOW 35
A flaw was found in sg3_utils.
CVSS 3.1HIGH 7.6· Physical · No auth · No interaction · EPSS 0.00348 · Published 2026-07-28 · Partial fix · 1.48-7.el10_2.1, 1.48-7.el10_0.2 +17 CWE-93
Priority LOW 34
Vim is an open source, command line text editor.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2026-06-11 · Partial fix · 9.2.0495 CWE-74
Priority LOW 34
NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain window by up to one cached TTL configured value.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00142 · Published 2026-05-20 · Partial fix · 1.25.1 CWE-346
Priority LOW 34
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege es…
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00287 · Published 2026-05-15 · Fixed in os kernel, RenoirPI-FP6_1.0.0.Ed +9 CWE-1189
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O,…
CVSS 3.1HIGH 7.9· Local · Low privileges · No interaction · EPSS 0.0017 · Published 2025-10-28 · Partial fix · 5.4.301, 5.10.246 +7
Priority LOW 33
Vim is an open source, command line text editor.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00201 · Published 2026-06-11 · Partial fix · 9.2.0561 CWE-829
Priority LOW 33
Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory…
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00152 · Published 2026-05-20 · Partial fix · 3.4.3 CWE-367
Priority LOW 33
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00862 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284
Priority LOW 26
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 5.7· Local · No auth · User interaction · EPSS 0.00124 · Published 2026-06-25 · Partial fix · 9.2.0653 CWE-787
Priority LOW 24
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00135 · Published 2026-06-11 · Partial fix · 9.2.0496 CWE-94
Priority LOW 20
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 4.0· Local · No auth · User interaction · EPSS 0.00118 · Published 2026-06-25 · Partial fix · 9.2.0698 CWE-787
THREATIST.IORead the docs