Read the docs
Red Hat Security Advisory

RHSA-2026:67857

OpenShift Container Platform 4.15.69 bug fix and security update

Released 2026-09-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 17 records

TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q

Integer Truncation on SQLite

Priority HIGH 72

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.73452 Published 2025-07-15 Partial fix · 3.50.2 CWE-197
TI-2025-08462 CVE-2025-9230

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Priority MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125
TI-2024-37146 CVE-2024-56171 · GHSA-m366-8h8r-6fqr

Use after free in xmlsoft libxml2

Priority MEDIUM 45

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01178 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-416
TI-2025-05415 CVE-2025-5994 · GHSA-xrv5-2wwg-jp3r

Cache poisoning via the ECS-enabled Rebirthday Attack

Priority MEDIUM 43

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00218 Published 2025-07-16 Partial fix · 1.23.0 CWE-349
TI-2026-31292 CVE-2026-43112 · GHSA-24h4-22f3-65qc

fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Priority MEDIUM 40

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00352 Published 2026-05-06 Partial fix · 5.15.209, 6.1.175 +5 CWE-125
TI-2025-08759 CVE-2025-9566 · GHSA-wp3j-xq48-xpjw

Podman: podman kube play command may overwrite host files

Priority LOW 38

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a h…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01207 Published 2025-09-05 Fixed in 5.6.1, 6:5.4.0-13.el10_0 +38 CWE-22
TI-2025-18627 CVE-2025-24928 · GHSA-fgfv-9xqc-v794

Stack-based buffer overflow in xmlsoft libxml2

Priority LOW 36

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.00385 Published 2025-02-18 Partial fix · 2.12.10, 2.13.6 CWE-121
TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

Priority LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280
TI-2026-23252 CVE-2026-29111

systemd: Local unprivileged user can trigger an assert

Priority LOW 24

systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00126 Published 2026-03-23 Partial fix · 257.11, 258.5 +1 CWE-269