Red Hat Security Advisory

RHSA-2026:73851

OpenShift Container Platform 4.16.72 bug fix update

Released 2026-10-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609281908-0, rhcos-ppc64le-416.94.202609281908-0, rhcos-s390x-416.94.202609281908-0 +1

Fixes 3 records

TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

HIGH 76

A flaw was found in GLib.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00558 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +94 CWE-193

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

urllib3 allows an unbounded number of links in the decompression chain

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2026-39261 CVE-2026-54369 · GHSA-53ch-pxc8-6g72

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions

LOW 37

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00153 Published 2026-06-29 Partial fix · 2.4.0 CWE-59