Issued:: 2026-09-29
Updated:: 2026-09-29

RHSA-2026:71446 - Security Advisory

Overview

Synopsis

Important: OpenShift Container Platform 4.22.16 bug fix and security update

Type/Severity

Security Advisory: Important

Topic

Red Hat OpenShift Container Platform release 4.22.16 is now available with
updates to packages and images that fix several bugs and add enhancements.

This release includes a security update for Red Hat OpenShift Container
Platform 4.22.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.22.16. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHSA-2026:71445

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/

Security Fix(es):

rsync: rsync: Unauthorized File Access via Symlink Module Root

(CVE-2026-53784)

rsync: rsync: Arbitrary file write via path traversal in --relative mode

(CVE-2026-53785)

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

(CVE-2026-53790)

rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

(CVE-2026-53791)

rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in

Chroot Mode (CVE-2026-53793)

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

(CVE-2026-53795)

rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802)
rsync: rsync: Local Privilege Escalation via Symlink Following

(CVE-2026-53803)

rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution

Failure (CVE-2026-70452)

rsync: rsync: Heap Out-of-Bounds Write via crafted argument list

(CVE-2026-70456)

rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458)
rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir

Symlink (CVE-2026-70460)

rsync: rsync: Information disclosure and denial of service via crafted

files-from entry (CVE-2026-70461)

rsync: rsync: Authorization bypass via `auth users` directive parsing

(CVE-2026-70463)

rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464)
perl: Perl: Incorrect regular expression processing via large regular

expressions (CVE-2026-13221)

rsync: rsync: Arbitrary file deletion via malicious file list

(CVE-2026-53789)

rsync: rsync: Denial of Service via Algorithmic Complexity

(CVE-2026-70453)

rsync: rsync: TLS Certificate Validation Bypass allows interception of

encrypted sessions (CVE-2026-70454)

rsync: rsync: Memory corruption via out-of-bounds write in size parsing

(CVE-2026-70457)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

All OpenShift Container Platform 4.22 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.

Solution

For OpenShift Container Platform 4.22 see the following documentation,
which will be updated shortly for this release, for important instructions
on how to upgrade your cluster and fully apply this asynchronous errata
update:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/

You may download the oc tool and use it to inspect release image metadata
for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests
may be found at
https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is
sha256:55a0c0c8f9a285fa468009511dd878d5492436ceb4f0207933b6403d19353876

(For s390x architecture)
The image digest is
sha256:f45ad2f2c1d8a45f339a69879d6baa5f4e5ba0c922147bf75f8451fa4cf38847

(For ppc64le architecture)
The image digest is
sha256:f29efc92dccdd9133824f9f083576c900ca7800bb331095581144d1b982e37d2

(For aarch64 architecture)
The image digest is
sha256:dfebff37094c5a2921e1c4070878293727c48e6dc6754a88bd7bab91f0a3b869

Affected Products

Red Hat OpenShift Container Platform 4.22 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.22 for RHEL 8 x86_64
Red Hat OpenShift Container Platform for Power 4.22 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.22 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.22 for RHEL 8 s390x
Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.22 for RHEL 8 aarch64

Fixes

BZ - 2499727 - CVE-2026-13221 perl: Perl: Incorrect regular expression processing via large regular expressions
BZ - 2515368 - CVE-2026-70460 rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
BZ - 2515373 - CVE-2026-70454 rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions
BZ - 2515375 - CVE-2026-53789 rsync: rsync: Arbitrary file deletion via malicious file list
BZ - 2515378 - CVE-2026-53790 rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths
BZ - 2515379 - CVE-2026-70458 rsync: rsync: Memory corruption via crafted file entries
BZ - 2515380 - CVE-2026-70464 rsync: rsync: Denial of Service via handshake stall
BZ - 2515381 - CVE-2026-53803 rsync: rsync: Local Privilege Escalation via Symlink Following
BZ - 2515384 - CVE-2026-53784 rsync: rsync: Unauthorized File Access via Symlink Module Root
BZ - 2515385 - CVE-2026-70463 rsync: rsync: Authorization bypass via `auth users` directive parsing
BZ - 2515386 - CVE-2026-70452 rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
BZ - 2515387 - CVE-2026-53791 rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
BZ - 2515389 - CVE-2026-53795 rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options
BZ - 2515395 - CVE-2026-70456 rsync: rsync: Heap Out-of-Bounds Write via crafted argument list
BZ - 2515396 - CVE-2026-53793 rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode
BZ - 2515403 - CVE-2026-70453 rsync: rsync: Denial of Service via Algorithmic Complexity
BZ - 2515407 - CVE-2026-70457 rsync: rsync: Memory corruption via out-of-bounds write in size parsing
BZ - 2515409 - CVE-2026-70461 rsync: rsync: Information disclosure and denial of service via crafted files-from entry
BZ - 2515416 - CVE-2026-53802 rsync: rsync: Arbitrary File Read via Symlink Following
BZ - 2515417 - CVE-2026-53785 rsync: rsync: Arbitrary file write via path traversal in --relative mode

References

https://access.redhat.com/security/updates/classification/#important

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

RHSA-2026:71446 - Security Advisory

Synopsis

Type/Severity

Topic

Description

Solution

Affected Products

Fixes

CVEs

References

Quick Links

Help

Site Info

Related Sites

Red Hat legal and privacy links

Red Hat legal and privacy links