Red Hat Security Advisory

RHSA-2026:62409

OpenShift Container Platform 4.14.73 bug fix and security update

Released 2026-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202609011250-0, rhcos-ppc64le-414.92.202609011250-0, rhcos-s390x-414.92.202609011250-0 +1

Fixes 9 records

TI-2026-12003 CVE-2026-14164 · GHSA-xq96-f7x8-gfx3

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

HIGH 72

A double free issue has been identified in libarchive's RAR5 reader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2026-06-30 Partial fix · 3.7.7-10.el10_2, 3.7.7-5.el10_0.1 +58 CWE-415

TI-2026-03321 CVE-2026-3833 · GHSA-6rgh-57xm-37v8

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

HIGH 72

A flaw was found in gnutls.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00565 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +42 CWE-178

TI-2026-30398 CVE-2026-42010 · GHSA-m3r7-xjq8-gc4r

Gnutls: gnutls: authentication bypass via nul character in username

MEDIUM 44

A flaw was found in gnutls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0105 Published 2026-05-07 Partial fix · 3.8.13, 3.8.10-4.el10_2 +47 CWE-170

TI-2026-31292 CVE-2026-43112 · GHSA-24h4-22f3-65qc

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00352 Published 2026-05-06 Partial fix · 5.15.209, 6.1.175 +5 CWE-125

TI-2026-06043 CVE-2026-6893 · GHSA-m789-mmmh-7vqc

Dracut: dracut: root code execution via dhcp options command injection

LOW 37

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01275 Published 2026-06-10 Fixed in 107-7.el10_2, 105-4.el10_0.1 +21 CWE-78

TI-2026-02601 CVE-2026-3012 · GHSA-59rx-q76w-hqrw

Samba: group policy certificate enrollment uses http:// without validation

LOW 36

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

CVSS 3.1HIGH 8.0 Adjacent network No auth No interaction EPSS 0.00261 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345

TI-2026-13304 CVE-2026-15816 · GHSA-8pxm-cr92-crx8

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

LOW 35

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00371 Published 2026-08-07 Partial fix · 107-9.el10_2, 105-4.el10_0.1 +24 CWE-78

TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280

TI-2026-23252 CVE-2026-29111

systemd: Local unprivileged user can trigger an assert

LOW 24

systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00126 Published 2026-03-23 Partial fix · 257.11, 258.5 +1 CWE-269