Red Hat Security AdvisoryRHSA-2026:77320
OpenShift Container Platform 4.13.72 bug fix and security update
Released 2026-10-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202609302032-0
Fixes 9 records
Priority HIGH 76
A flaw was found in GLib.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00558 · Published 2026-06-30 · Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +94 CWE-193
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01467 · Published 2026-08-15 · Partial fix · 5.10.265, 5.15.216 +6
Priority MEDIUM 43
A flaw was found in libgnutls.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00769 · Published 2026-05-26 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-126
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
CVSS 4.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2026-06-29 · Partial fix · 2.4.0 CWE-59
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00357 · Published 2026-09-11 · Partial fix · 5.10.270, 5.15.221 +6
Priority LOW 36
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · No interaction · EPSS 0.00261 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345
Priority LOW 34
A flaw was found in GLib.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0084 · Published 2026-06-30 · Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +91 CWE-22
Priority LOW 31
A flaw was found in Samba’s vfs_worm module.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00947 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280
Priority LOW 23
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV.
CVSS — · EPSS 0.00434 · Published 2026-09-04 · Partial fix · 5.10.269, 5.15.220 +7