Red Hat Security Advisory

RHSA-2026:5873

OpenShift Container Platform 4.16.59 bug fix and security update

Released 2026-04-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202603231244-0, rhcos-ppc64le-416.94.202603231244-0, rhcos-s390x-416.94.202603231244-0 +1

Fixes 2 records

TI-2025-42862 CVE-2025-69419 · GHSA-x77r-97gw-wh89

Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

LOW 35

Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the alloca…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00607 Published 2026-01-27 Partial fix · 3.6.1, 3.5.5 +4 CWE-787

TI-2025-11726 CVE-2025-12801 · GHSA-q8x7-j9x6-2fpc

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

LOW 29

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2026-03-04 Partial fix · 1:2.8.3-0.el10_1.3, 1:2.3.3-68.el8_10 +8 CWE-279