Red Hat Security Advisory

RHSA-2026:67935

OpenShift Container Platform 4.16.71 bug fix and security update

Released 2026-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609140240-0, rhcos-ppc64le-416.94.202609140240-0, rhcos-s390x-416.94.202609140240-0 +1

Fixes 5 records

TI-2026-12003 CVE-2026-14164 · GHSA-xq96-f7x8-gfx3

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

HIGH 72

A double free issue has been identified in libarchive's RAR5 reader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00792 Published 2026-06-30 Partial fix · 3.7.7-10.el10_2, 3.7.7-5.el10_0.1 +58 CWE-415

TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

LOW 38

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00182 Published 2026-06-09 Partial fix · 3.53.2 CWE-122

TI-2026-34044 CVE-2026-46323 · GHSA-hf4r-hm8m-w52j

net: gro: don't merge zcopy skbs

LOW 35

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2026-06-09 Partial fix · 6.1.176, 6.6.142 +4 CWE-416

TI-2026-13634 CVE-2026-16313 · GHSA-wqmp-fw94-rpg4

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

LOW 35

A flaw was found in sg3_utils.

CVSS 3.1HIGH 7.6 Physical No auth No interaction EPSS 0.00348 Published 2026-07-28 Partial fix · 1.48-7.el10_2.1, 1.48-7.el10_0.2 +17 CWE-93

TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p

SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek

LOW 31

SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00195 Published 2026-06-09 Partial fix · 3.53.2 CWE-125