RHSA-2026:34791HighCVSS 8.1
Red Hat Security Advisory: OpenShift Container Platform 4.20.28 bug fix and security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-9277 — shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators CVE-2026-35469 — Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2026:34791
- externalhttps://access.redhat.com/security/cve/CVE-2026-35469
- externalhttps://access.redhat.com/security/cve/CVE-2026-9277
- externalhttps://access.redhat.com/security/updates/classification/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34791.json