Get real-time updates on Telegram
P5Verified
Red Hat Security Advisory: OpenShift Container Platform 4.17.58 packages and security update
CVE-2026-15809, CVE-2026-33818, CVE-2026-34986, CVE-2026-39821, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 affects cri-o. EPSS 0.00183 (percentile 0.07139), scored 2026-10-03. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9. Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9. Fixed version: 0:1.30.0-10.el8. Fixed version: 0:1.30.0-10.el8.
- CVE
- CVE-2026-15809, CVE-2026-33818, CVE-2026-34986, CVE-2026-39821, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862
- Product
- cri-o
- CCR priority
- 0.0 /100 (P5)
- CVSS
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · OSV.dev
- EPSS
- 0.00183 · percentile 0.07139 · 2026-10-03
- KEV
- no
Affected products
- cri-o · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8
- cri-o-debuginfo · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8
- cri-o-debugsource · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el8
- cri-o · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9
- cri-o-debuginfo · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9
- cri-o-debugsource · Fixed version: 0:1.30.14-13.rhaos4.17.git3a25d98.el9
- cri-tools · Fixed version: 0:1.30.0-10.el8
- cri-tools-debuginfo · Fixed version: 0:1.30.0-10.el8
- cri-tools-debugsource · Fixed version: 0:1.30.0-10.el8
- openshift · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- openshift-clients · Fixed version: 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el8
- openshift-clients-redistributable · Fixed version: 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el8
- openshift-hyperkube · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- openshift-kube-apiserver · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- openshift-kube-controller-manager · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- openshift-kube-scheduler · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- openshift-kubelet · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8
- ose-aws-ecr-image-credential-provider · Fixed version: 0:4.17.0-202609190230.p2.gb0a5486.assembly.stream.el8
- ose-azure-acr-image-credential-provider · Fixed version: 0:4.17.0-202609081428.p2.g5bcfbfd.assembly.stream.el8
- ose-gcp-gcr-image-credential-provider · Fixed version: 0:4.17.0-202609081428.p2.g8ce997d.assembly.stream.el8
- cri-tools · Fixed version: 0:1.30.0-10.el9
- cri-tools-debuginfo · Fixed version: 0:1.30.0-10.el9
- cri-tools-debugsource · Fixed version: 0:1.30.0-10.el9
- openshift · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- openshift-clients · Fixed version: 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el9
- openshift-clients-redistributable · Fixed version: 0:4.17.0-202609081428.p2.g7189593.assembly.stream.el9
- openshift-hyperkube · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- openshift-kube-apiserver · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- openshift-kube-controller-manager · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- openshift-kube-scheduler · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- openshift-kubelet · Fixed version: 0:4.17.0-202609081428.p2.g4e295fa.assembly.stream.el9
- ose-aws-ecr-image-credential-provider · Fixed version: 0:4.17.0-202609190230.p2.gb0a5486.assembly.stream.el9
- ose-azure-acr-image-credential-provider · Fixed version: 0:4.17.0-202609081428.p2.g5bcfbfd.assembly.stream.el9
- ose-gcp-gcr-image-credential-provider · Fixed version: 0:4.17.0-202609081428.p2.g8ce997d.assembly.stream.el9
- cri-o · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el8
- cri-o-debuginfo · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el8
- cri-o-debugsource · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el8
- cri-o · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el9
- cri-o-debuginfo · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el9
- cri-o-debugsource · Fixed version: 0:1.28.11-17.rhaos4.15.git48e6ddb.el9
- cri-o · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el8
- cri-o-debuginfo · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el8
- cri-o-debugsource · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el8
- cri-o · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el9
- cri-o-debuginfo · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el9
- cri-o-debugsource · Fixed version: 0:1.27.8-22.rhaos4.14.git0633bf1.el9
- cri-o · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8
- cri-o-debuginfo · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8
- cri-o-debugsource · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el8
- cri-o · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9
- cri-o-debuginfo · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9
- cri-o-debugsource · Fixed version: 0:1.31.13-14.rhaos4.18.gitf2de9ac.el9
- cri-o · Fixed version: 0:1.25.5-36.rhaos4.12.git2e7f657.el8
- cri-o-debuginfo · Fixed version: 0:1.25.5-36.rhaos4.12.git2e7f657.el8
- cri-o-debugsource · Fixed version: 0:1.25.5-36.rhaos4.12.git2e7f657.el8
- cri-o · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el8
- cri-o-debuginfo · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el8
- cri-o-debugsource · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el8
- cri-o · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el9
- cri-o-debuginfo · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el9
- cri-o-debugsource · Fixed version: 0:1.29.13-14.rhaos4.16.git84cfdc6.el9
- cri-o · Fixed version: 0:1.32.13-11.rhaos4.19.git089e95c.el9
- cri-o-debuginfo · Fixed version: 0:1.32.13-11.rhaos4.19.git089e95c.el9
- cri-o-debugsource · Fixed version: 0:1.32.13-11.rhaos4.19.git089e95c.el9
- cri-o · Fixed version: 0:1.34.11-4.rhaos4.21.git358c4b4.el9
- cri-o-debuginfo · Fixed version: 0:1.34.11-4.rhaos4.21.git358c4b4.el9
- cri-o-debugsource · Fixed version: 0:1.34.11-4.rhaos4.21.git358c4b4.el9
- cri-o · Fixed version: 0:1.33.13-5.rhaos4.20.git7ebc848.el9
- cri-o-debuginfo · Fixed version: 0:1.33.13-5.rhaos4.20.git7ebc848.el9
- cri-o-debugsource · Fixed version: 0:1.33.13-5.rhaos4.20.git7ebc848.el9
Provenance
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
- OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-15809.html