RHSA-2026:25181CriticalCVSS 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.18.44 bug fix and security update

Published
June 17, 2026
Last Modified
June 17, 2026

🔗 CVE IDs covered (6)

📋 Description

CVE-2026-4878 — libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() CVE-2026-35385 — OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-39979 — jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers CVE-2026-40164 — jq: jq: Denial of Service via crafted JSON object causing hash collisions CVE-2026-41035 — rsync: Rsync: Use-after-free vulnerability in extended attribute handling CVE-2026-43037 — kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

🔗 References (9)