Red Hat Security Advisory

RHSA-2026:12274

OpenShift Container Platform 4.12.88 bug fix and security update

Released 2026-05-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202604281506-0

Fixes 9 records

TI-2026-20746 CVE-2026-25646

LIBPNG has a heap buffer overflow in png_set_quantize

HIGH 69

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0112 Published 2026-02-10 Partial fix · 1.6.55 CWE-122

TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

MEDIUM 51

A flaw was found in libarchive.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01092 Published 2026-03-30 Partial fix · 3.1.2-14.el7_9.2, 3.3.3-7.el8_10 +51 CWE-190

TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

MEDIUM 41

A flaw was found in libarchive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01287 Published 2026-03-19 Partial fix · 3.7.7-8.el10_1, 3.7.7-5.el10_0 +54 CWE-125

TI-2026-22691 CVE-2026-28417

Vim has OS Command Injection in netrw

LOW 39

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01353 Published 2026-02-27 Fixed in 9.2.0073 CWE-86

TI-2026-25809 CVE-2026-33412

Vim affected by Command injection via newline in glob()

LOW 36

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00867 Published 2026-03-24 Fixed in 9.2.0202 CWE-78

TI-2026-22695 CVE-2026-28421

Vim has a heap-buffer-overflow and a segmentation fault

LOW 35

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00206 Published 2026-02-27 Fixed in 9.2.0077 CWE-122

TI-2026-18319 CVE-2026-22801

LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

LOW 33

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00134 Published 2026-01-12 Partial fix · 1.6.54 CWE-125

TI-2026-18222 CVE-2026-22695

LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

LOW 31

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00222 Published 2026-01-12 Partial fix · 1.6.54 CWE-125

TI-2026-20817 CVE-2026-25749

Heap Overflow in Vim

LOW 29

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00262 Published 2026-02-06 Partial fix · 9.1.2132 CWE-122