P5Verified

Red Hat Security Advisory: OpenShift Container Platform 4.12.99 packages and security update

CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-41178, CVE-2026-42501, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-42508, CVE-2026-44740, CVE-2026-46595, CVE-2026-48050, CVE-2026-56852, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-71556 affects cri-o. EPSS 0.00591 (percentile 0.46379), scored 2026-10-03. Fixed version: 0:1.25.5-37.rhaos4.12.git2e7f657.el8.

CVE: CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-41178, CVE-2026-42501, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-42508, CVE-2026-44740, CVE-2026-46595, CVE-2026-48050, CVE-2026-56852, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-71556
Product: cri-o
CCR priority: 0.1 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N · OSV.dev
EPSS: 0.00591 · percentile 0.46379 · 2026-10-03
KEV: no

Affected products

cri-o · Fixed version: 0:1.25.5-37.rhaos4.12.git2e7f657.el8
cri-o-debuginfo · Fixed version: 0:1.25.5-37.rhaos4.12.git2e7f657.el8
cri-o-debugsource · Fixed version: 0:1.25.5-37.rhaos4.12.git2e7f657.el8
cri-tools · Fixed version: 0:1.25.0-8.el8
cri-tools-debuginfo · Fixed version: 0:1.25.0-8.el8
cri-tools-debugsource · Fixed version: 0:1.25.0-8.el8
cri-o · Fixed version: 0:1.25.5-8.rhaos4.12.git6120b13.el9
cri-o-debuginfo · Fixed version: 0:1.25.5-8.rhaos4.12.git6120b13.el9
cri-o-debugsource · Fixed version: 0:1.25.5-8.rhaos4.12.git6120b13.el9
cri-tools · Fixed version: 0:1.25.0-7.el9
cri-tools-debuginfo · Fixed version: 0:1.25.0-7.el9
cri-tools-debugsource · Fixed version: 0:1.25.0-7.el9
openshift · Fixed version: 0:4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el8
openshift-clients · Fixed version: 0:4.12.0-202609111749.p2.gd691257.assembly.stream.el8
openshift-clients-redistributable · Fixed version: 0:4.12.0-202609111749.p2.gd691257.assembly.stream.el8
openshift-hyperkube · Fixed version: 0:4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el8
openshift · Fixed version: 0:4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el9
openshift-clients · Fixed version: 0:4.12.0-202609111749.p2.gd691257.assembly.stream.el9
openshift-clients-redistributable · Fixed version: 0:4.12.0-202609111749.p2.gd691257.assembly.stream.el9
openshift-hyperkube · Fixed version: 0:4.12.0-202609111749.p2.g0e18cfc.assembly.stream.el9
flightctl · Fixed version: 0:1.2.1-1.el10
flightctl-agent · Fixed version: 0:1.2.1-1.el10
flightctl-cli · Fixed version: 0:1.2.1-1.el10
flightctl · Fixed version: 0:1.2.1-1.el9
flightctl-agent · Fixed version: 0:1.2.1-1.el9
flightctl-cli · Fixed version: 0:1.2.1-1.el9
rhc · Fixed version: 1:0.2.2-1.el9_2.4
rhc-debuginfo · Fixed version: 1:0.2.2-1.el9_2.4
rhc-debugsource · Fixed version: 1:0.2.2-1.el9_2.4
rhc · Fixed version: 1:0.2.4-9.el9_4
rhc-debuginfo · Fixed version: 1:0.2.4-9.el9_4
rhc-debugsource · Fixed version: 1:0.2.4-9.el9_4
rhc · Fixed version: 1:0.2.7-1.el9_6.5
rhc-debuginfo · Fixed version: 1:0.2.7-1.el9_6.5
rhc-debugsource · Fixed version: 1:0.2.7-1.el9_6.5
rhc-debuginfo · Fixed version: 1:0.2.7-1.el9_6.5
rhc-debugsource · Fixed version: 1:0.2.7-1.el9_6.5
rhc-devel · Fixed version: 1:0.2.7-1.el9_6.5
rhc-worker-playbook · Fixed version: 0:0.2.3-6.el10_0
rhc-worker-playbook-debuginfo · Fixed version: 0:0.2.3-6.el10_0
rhc-worker-playbook-debugsource · Fixed version: 0:0.2.3-6.el10_0
host-metering · Fixed version: 0:1.4.0-8.el7_9
host-metering-debuginfo · Fixed version: 0:1.4.0-8.el7_9
host-metering-debugsource · Fixed version: 0:1.4.0-8.el7_9
host-metering-selinux · Fixed version: 0:1.4.0-8.el7_9
rhc · Fixed version: 1:0.3.2-5.el10_0
rhc-debuginfo · Fixed version: 1:0.3.2-5.el10_0
rhc-debugsource · Fixed version: 1:0.3.2-5.el10_0
yggdrasil · Fixed version: 0:0.4.7-5.el10_0
yggdrasil-debuginfo · Fixed version: 0:0.4.7-5.el10_0
yggdrasil-debugsource · Fixed version: 0:0.4.7-5.el10_0
yggdrasil-examples-debuginfo · Fixed version: 0:0.4.7-5.el10_0
yggdrasil-devel · Fixed version: 0:0.4.7-5.el10_0
go-fdo-server · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-server-debuginfo · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-server-debugsource · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-server-manufacturer · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-server-owner · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-server-rendezvous · Fixed version: 0:1.0.1-2.el10_2.3
go-fdo-client · Fixed version: 0:1.0.0-4.el10_2.5
go-fdo-client-debuginfo · Fixed version: 0:1.0.0-4.el10_2.5
go-fdo-client-debugsource · Fixed version: 0:1.0.0-4.el10_2.5
rhc-worker-playbook · Fixed version: 0:0.2.10-1.el10_2
rhc-worker-playbook-debuginfo · Fixed version: 0:0.2.10-1.el10_2
rhc-worker-playbook-debugsource · Fixed version: 0:0.2.10-1.el10_2
rhc · Fixed version: 1:0.2.5-9.el8_10
rhc-debuginfo · Fixed version: 1:0.2.5-9.el8_10
rhc-debugsource · Fixed version: 1:0.2.5-9.el8_10
rhc · Fixed version: 1:0.2.7-8.el9_8
rhc-debuginfo · Fixed version: 1:0.2.7-8.el9_8
rhc-debugsource · Fixed version: 1:0.2.7-8.el9_8
rhc-debuginfo · Fixed version: 1:0.2.7-8.el9_8
rhc-debugsource · Fixed version: 1:0.2.7-8.el9_8
rhc-devel · Fixed version: 1:0.2.7-8.el9_8
yggdrasil · Fixed version: 0:0.4.9.2-1.el10_2
yggdrasil-debuginfo · Fixed version: 0:0.4.9.2-1.el10_2
yggdrasil-debugsource · Fixed version: 0:0.4.9.2-1.el10_2
yggdrasil-examples-debuginfo · Fixed version: 0:0.4.9.2-1.el10_2
yggdrasil-devel · Fixed version: 0:0.4.9.2-1.el10_2
rhc · Fixed version: 1:0.3.8-6.el10_2
rhc-debuginfo · Fixed version: 1:0.3.8-6.el10_2
rhc-debugsource · Fixed version: 1:0.3.8-6.el10_2
delve · Fixed version: 0:1.26.1-1.module+el8.10.0+24516+40554724
delve-debuginfo · Fixed version: 0:1.26.1-1.module+el8.10.0+24516+40554724
delve-debugsource · Fixed version: 0:1.26.1-1.module+el8.10.0+24516+40554724
go-toolset · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-bin · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-docs · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-misc · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-race · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-src · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
golang-tests · Fixed version: 0:1.26.5-1.module+el8.10.0+24506+6809f2d9
ipp-usb · Fixed version: 0:0.9.27-7.el10_2.2
go-toolset · Fixed version: 0:1.26.4-1.el9_8
golang · Fixed version: 0:1.26.4-1.el9_8
golang-bin · Fixed version: 0:1.26.4-1.el9_8
golang-docs · Fixed version: 0:1.26.4-1.el9_8
golang-misc · Fixed version: 0:1.26.4-1.el9_8
golang-race · Fixed version: 0:1.26.4-1.el9_8
golang-src · Fixed version: 0:1.26.4-1.el9_8
golang-tests · Fixed version: 0:1.26.4-1.el9_8
go-toolset · Fixed version: 0:1.26.4-1.el10_2
golang · Fixed version: 0:1.26.4-1.el10_2
golang-bin · Fixed version: 0:1.26.4-1.el10_2
golang-docs · Fixed version: 0:1.26.4-1.el10_2
golang-misc · Fixed version: 0:1.26.4-1.el10_2
golang-race · Fixed version: 0:1.26.4-1.el10_2
golang-src · Fixed version: 0:1.26.4-1.el10_2
golang-tests · Fixed version: 0:1.26.4-1.el10_2
golang1.26 · Fixed version: 0:1.26.4-2.hum1
golang1.26-docs · Fixed version: 0:1.26.4-2.hum1
golang1.25 · Fixed version: 0:1.25.11-2.hum1
golang1.25-docs · Fixed version: 0:1.25.11-2.hum1

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-27145.html