Red Hat Security Advisory: OpenShift Container Platform 4.13.65 bug fix and security update
🔗 CVE IDs covered (9)
📋 Description
CVE-2024-28757 — expat: XML Entity Expansion CVE-2025-61662 — grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-69419 — openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing CVE-2026-4111 — libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive CVE-2026-25646 — libpng: LIBPNG has a heap buffer overflow in png_set_quantize CVE-2026-25749 — vim: Vim: Arbitrary code execution via 'helpfile' option processing CVE-2026-28417 — vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin CVE-2026-28421 — vim: Vim: Denial of service and information disclosure via crafted swap file CVE-2026-33412 — vim: Vim: Arbitrary code execution via command injection in glob() function
🔗 References (12)
- selfhttps://access.redhat.com/errata/RHSA-2026:7239
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268766
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2414683
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2430386
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2437843
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2438542
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2443455
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2443474
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2446453
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2450907
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7239.json