RHSA-2026:6555HighCVSS 7.1

Red Hat Security Advisory: OpenShift Container Platform 4.18.37 security and extras update

Published
April 9, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-24049 →

📋 Description

CVE-2026-24049 — wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:3cae142296a00b72fd954836402496c7c6d9327bae40ea042f9a17c3fd02b33f_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:55698031e39a7d379a91aeec2a1db4f97392632325be02c8fc67475ad5c69455_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:6f09dc9faf4069704e8c4e946608d4b8384bab5d4097d0d62c4bbfd59cf51246_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d36c9ff60c6a8fbdfec283082aee811f0831c11c37ed17d6ecbbb9e026052ef8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:1a8b0e481c365b69590db848e1f6f63416782cd3e1447c60e46d78ff569f4200_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:4f64cbb6dc055fdc32a4875c9c2cfc0d4314c87abc7df3ec8518ccc31af41d40_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7069d50fff2060ede7c75294506d00d8e1de1a404e3610f9910476ad4b4f665b_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:dd3cc55ab156d062c36a3041a892024705f4aa4d2bdb880791c614e17171db08_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:2b6927f868882db58e0a4d249e196f1646fb402640bed9fe08bc2cc47d9a8315_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:675e65b94a487efb7a10ee0bc4582370474f2e5f589a3a5fded4f18fb2393eea_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:8e2d602249f3d9ce5e0176f31654d99c0fbd02cbc3dc71396d623ca4245a5ee2_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:99768d5dbf6d3517b40d0f455a6d30ff7b653ee6e855d260ca016993e89bfb22_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:08bebca9e0fccb6469e6bb1be6afe1c47f8344a41c6316fb571cf8190b4bf6d3_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:23058303b27f8e2bb0d15cdcf1069fc553d8a6418a41ae37c973f5e0cd84c392_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:7fdd833f3967ba2191ea6013e3753fd421b1009b148e6566e2f14cd26530d164_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:bdf49eaefe7e2a939e46137313981e209735921fb2d88b9169e6d1ebb38f2548_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:030f2f8a6ccdccb501539d70d8cdf02a554b7ef518047712423b2c60debec3e2_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:43f91ca968a36548c0d1e1b396dad8b234ffd878c024848227b95c09df207963_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:73487f236ff2f361cd0877566a89314ac861ef37afbdc6fbb469cf9b330f39e8_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:9d5d380b0990359a7198a815bee73c94a06f2d3186b14c732870228ae76ba239_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:00b3e52b6727a7321a632dc691cf1c956a6d1b013c6a7fc0bae635aaddabb070_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:0a1b2f9b31cbf18d56d3a38e22b355e5bc093d16a41a1bcc365cfb5544920f8c_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:70e21db93bee0d54a22a8f8da116f38fbda4d3604a97c3c30c4d116fd30b2e31_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:9110c3c6c58ad3bd679e5d74b27acbc9ca9fe711172d73b57ca5951e218d0a29_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:20ecba937254b7d0e5be1a40c5a186214e0537f108fa4a6221a69dca4aabfc33_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:7ad7b241355d39d6f0290814f208072bd34d6044ae7160cb88c308cb56fde721_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:d7ad6442887f89ef6a887198cea01ce35108a91bf6340689e013acb6c55db2fa_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:f9a5c8655d9dcedfdce72f6a2fb75946efe89332e1a4c2cb034ef97b747bb360_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:3139256b47c267600c74fcefc628afb254c235213c2a1121cf7e93751cd72dd5_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • +170 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)