Red Hat Security Advisory

RHSA-2026:8423

OpenShift Container Platform 4.18.38 bug fix and security update

Released 2026-04-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202604140044-0, rhcos-ppc64le-418.94.202604140044-0, rhcos-s390x-418.94.202604140044-0 +1

TI-2026-03561 CVE-2026-4111 · GHSA-xrqh-48jh-pjv2

MEDIUM 40

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00721 Published 2026-03-13 Partial fix · 3.7.7-5.el10_1, 3.7.7-5.el10_0 +33 CWE-835

TI-2026-22691 CVE-2026-28417

LOW 39

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01353 Published 2026-02-27 Fixed in 9.2.0073 CWE-86

TI-2026-25809 CVE-2026-33412

LOW 36

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00867 Published 2026-03-24 Fixed in 9.2.0202 CWE-78

TI-2026-22695 CVE-2026-28421

LOW 35

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00206 Published 2026-02-27 Fixed in 9.2.0077 CWE-122

TI-2026-20817 CVE-2026-25749

LOW 29

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00262 Published 2026-02-06 Partial fix · 9.1.2132 CWE-122