What is RHSA-2026:6565?

RHSA-2026:6565 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenShift Container Platform 4.20.18 security and extras update

Which CVE IDs does RHSA-2026:6565 cover?

RHSA-2026:6565 covers the following CVE IDs: CVE-2026-24049. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:6565?

RHSA-2026:6565 has a CVSS v3 base score of 7.1, published by Red Hat Product Security.

Which products are affected by RHSA-2026:6565?

RHSA-2026:6565 affects 178 products, including: Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:07a70b5e9e0b53de61a64c602e9c1cfe9b86494d107d2e185cb964eaa002b5d8_ppc64le as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:3e7f4903f237cb79178b2207929358ea22f2234e788793e665bd3a19eec90f43_s390x as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7126dafcb219738b1ad3c9d16ffdb29dd3551b9ee7fe4a337da0e0019ee5e91c_arm64 as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:fca8d034f15afc6c4a0308a9ed0931c8bc04b099cbd05509ee042a4f25071131_amd64 as a component of Red Hat OpenShift Container Platform 4.2; and others — see the full list on the advisory page.

RHSA-2026:6565HighCVSS 7.1

Red Hat Security Advisory: OpenShift Container Platform 4.20.18 security and extras update

Vendor

Red Hat Product Security

Published

April 9, 2026

Last Modified

August 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-24049 →

📋 Description

CVE-2026-24049 — wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

🎯 Affected products178

Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:07a70b5e9e0b53de61a64c602e9c1cfe9b86494d107d2e185cb964eaa002b5d8_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:3e7f4903f237cb79178b2207929358ea22f2234e788793e665bd3a19eec90f43_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:7126dafcb219738b1ad3c9d16ffdb29dd3551b9ee7fe4a337da0e0019ee5e91c_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:fca8d034f15afc6c4a0308a9ed0931c8bc04b099cbd05509ee042a4f25071131_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:0bebfeedb1dac362c6ec532d12b8dca8370f00bd7e1f98e559aadbd50a1caebf_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:1e218ea4030a63eed81759c1331ca060000d5ede5e14f7fc4c63fcff00594fc6_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:2867bedf8b8227730ae0091885e9bb0d82c974f46c2144ec0d88748cfed6e91f_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:b705a3866e5324e99b2f11337b82e2a5e45e4145e7c4d5121e10e15901d2ee91_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:319e61f485a21766725d2f2c165bc0883d2af1b46110408f7d2c9d96574ea274_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4678de5a7671204af30f9eb0101b7d64017ef13d8f5f7d6df91e341af068ffed_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:5faf834f4a7fa098040238ee91c6fd8d27bce9de1257eeed4ada082a87400e93_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:91b9199da0eb259369eb604c9461358557e99addfc940913455f806ae1e53912_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:65a98216ea2d6338b42876a7827bc9034fd0d2aeb04e42680f5983b95b073882_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:6a66d3fdc011706bb27b5ddd47d0deb61638e13e4d51c66706925afccb8b991b_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e116556a1c8f172a8903b89444588e53bddd6788a30b416406b62c34ee660653_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e492ecd71ecb4a2b6e47fe548d3c1f794e3e5afacdca474b031cf4a5f1a0a147_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:0864839028213084782429fa01fbb71b28b7bbd173331968a89e26fb69c5181f_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2337f6a10f392b0a5efb1b28812e4dd10b0e523ed95b10998a78fd53f9a9b34d_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:51555ddddc967cfbcd08ed51c16ae2c91039c697f9d3a5b76247fcfe6b68392e_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:c8484b7389913f7cf299ca68159b09f1eb53fd2201dee8328b9e9ba184f200f7_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9@sha256:49ff342379cd1bbb24d6d8a563b764e614303adb83a64088c514d1ff991abb95_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9@sha256:cbbfce4ce32da5a94daec5b648db33aac22bbc724f3e4e007795f9a82148f679_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9@sha256:f23767adf46c5f59bcd98d23bc08f12dc99042a0f16fc845e181e0cc4a7379ce_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/metallb-rhel9@sha256:f6f788e7481a5f383e942a9cf33a70aa5aa168f7df96e2f48297c71e656a4a88_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:1508864a5c77c9baf8e1d9e047db0e00794ed8be49af96b2d4acff90c044101d_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:45422df27234fe738b40b14dda298850702065a1dd155c656b1fecf867b70541_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:a214c38e62b7f90b82f0a68f225c60484d676a9e7f43fa5bcda1ac1505dc0c7a_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:ebebaca5e23fee0ad3115483515aa41bfb3a34893183c6e629c85343075e54f9_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:6e6a1891e13d869f0bd5c9061790c55e7173e281330a9c7a5e53d7362ba7494e_arm64 as a component of Red Hat OpenShift Container Platform 4.2
+148 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products178

✅ Remediation

🔗 References (4)