RHSA-2026:7250HighCVSS 7.1

Red Hat Security Advisory: OpenShift Container Platform 4.19.28 security and extras update

Published
April 16, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-24049 →

📋 Description

CVE-2026-24049 — wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

🎯 Affected products186

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:1c63f0ae6aabb04ae2041bdbdd6cc702a4ed0dbc3dfc5a9b9d1974bde807f5bc_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:28fecd246e829e7d1f27cebcf1d061bb2fe4e811cb20032a34d27355f5eafead_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:805bd39d21373a7fe04b67d0575f98a5c4dead769ac8d7e6ba9c8cd0264eb222_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:e4fec7267da99f4b174e2a34afb99f634fbe65b6f6e227e044db226b24e5aeba_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:0f41a00e1f61310328ad9b864b1f196411a8c34f45f48938625fc22fbada0de7_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:18d68a4cb6530ee803b8e725ba37b6ce2b723f17318674b53cbe77237ee39dc5_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:23f478b632a3f6266c667c866282a37a56b18b2ce6ffda55dbe8c47d08773310_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:667704902e2127b2fa0a53b5fefe220fb91df7321cfb50e2a2fe320fdd6a49dd_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:61d73d9c5ae42cdf724fef78caf14ea746fe660f26a3bbd4a479b81c82c7d683_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7e372436c61a1f470306641feb7a9a44bdbbfdbc1f23334f7c6a10eeacb0c42c_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:8cdb1070cca0de7a63467fb3456decad2f313794b48316327a9e4fb1f3b18a6e_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:a44e48ee06f70620dc613cf3110d20487e016c83ce38852d28c5a058db5a2882_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:3f9aa6ee23e6c00e50076971f79f6feebd99d8e38b935530b11f645ed80c3638_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c5418e4eee232b334381107c2ee42210ed71a7be82f65fbc6f452a18c9923f70_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:ca33a7a5471ce90065d211c8a24e151a21f0eb15139bde5b698ea59924423d66_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d9112a5e6b887a268d1df0cbc243e7b87ea0c7d116283dab2d3bb0401302a319_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:090af145138c08378da8209d0c2ee22458195ef4fcaa44e78684740b32a875ec_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:0a8fcdb4ad3df99ff628fdc4956d7177638327db77627709990a717d24537fdd_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:3c262b1ce6523692fcd9ae024831e15e6a836df98b87b594a3e6adc2c63c11e5_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:c945d44305dad9b8038d55c24f3140d78e3b2c24dbe1052bddb80a66c41da9d2_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:2d7960f042884ea6acf5434516f7bb6e428a286a693a3db8fa241be5ec943726_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:4633b8cef81cee5c0ab556933a6ab6b393499dac6006b95f7a3e3c75370d48bd_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:528630410d9300c92c30b4911757af08675a6c36bd911e66e1937e4afb7cd76e_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:ec25508296ead60a4a762c8e7e61841cd89d0a8d860cde1b1e0457cfbdef6e50_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:2fe3abc70a28bf6a205c71dbd5f20523c028a42f6624b73a45298192d2829c52_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:42a03c580a659ca79571333656fe9b9156c53863bb942039a4f10d5efb0fa661_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:4d98a712d5c0572e183baf5a23fdb6021647cab9503b185ff5b9deea2ac2fbbe_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:5cc67662794b3979aea02f54d63068ee504834775288d1fe516ef6dc43248a6e_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:6241d5251980e937cb6443e5cc7e8bdd06a7ccc6aae823d91cc1990df256dc46_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • +156 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)