Get real-time updates on Telegram

Red Hat Security Advisory: OpenShift Container Platform 4.19.33 packages and security update

CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 affects image-builder. EPSS 0.00615 (percentile 0.47623), scored 2026-10-03. Fixed version: 0:52.1-1.el9_8.2. Fixed version: 0:52.1-1.el9_8.2. Fixed version: 0:52.1-1.el9_8.2. Fixed version: 0:52.1-1.el10_2.2. Fixed version: 0:52.1-1.el10_2.2. Fixed version: 0:52.1-1.el10_2.2. Fixed version: 4:1.2.9-1.el9_4.2.

CVE

CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-34986, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

Product

image-builder

CCR priority

0.2 /100 (P5)

CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H · OSV.dev

EPSS

0.00615 · percentile 0.47623 · 2026-10-03

KEV

no

Affected products

• image-builder · Fixed version: 0:52.1-1.el9_8.2
• image-builder-debuginfo · Fixed version: 0:52.1-1.el9_8.2
• image-builder-debugsource · Fixed version: 0:52.1-1.el9_8.2
• image-builder · Fixed version: 0:52.1-1.el10_2.2
• image-builder-debuginfo · Fixed version: 0:52.1-1.el10_2.2
• image-builder-debugsource · Fixed version: 0:52.1-1.el10_2.2
• runc · Fixed version: 4:1.2.9-1.el9_4.2
• runc-debuginfo · Fixed version: 4:1.2.9-1.el9_4.2
• runc-debugsource · Fixed version: 4:1.2.9-1.el9_4.2
• runc · Fixed version: 4:1.2.9-3.el9_6.1
• runc-debuginfo · Fixed version: 4:1.2.9-3.el9_6.1
• runc-debugsource · Fixed version: 4:1.2.9-3.el9_6.1
• osbuild-composer · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-core · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-core-debuginfo · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-debuginfo · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-debugsource · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-tests-debuginfo · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-worker · Fixed version: 0:165.1-4.el9_8
• osbuild-composer-worker-debuginfo · Fixed version: 0:165.1-4.el9_8
• osbuild-composer · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-core · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-core-debuginfo · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-debuginfo · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-debugsource · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-tests-debuginfo · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-worker · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer-worker-debuginfo · Fixed version: 0:165.1-3.el10_2.1
• osbuild-composer · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-core · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-core-debuginfo · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-debuginfo · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-debugsource · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-tests-debuginfo · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-worker · Fixed version: 0:101.5-1.el8_10
• osbuild-composer-worker-debuginfo · Fixed version: 0:101.5-1.el8_10
• skopeo · Fixed version: 2:1.14.6-1.el9_4
• skopeo-debuginfo · Fixed version: 2:1.14.6-1.el9_4
• skopeo-debugsource · Fixed version: 2:1.14.6-1.el9_4
• skopeo-tests · Fixed version: 2:1.14.6-1.el9_4
• podman · Fixed version: 4:4.9.4-20.el9_4.3
• podman-debuginfo · Fixed version: 4:4.9.4-20.el9_4.3
• podman-debugsource · Fixed version: 4:4.9.4-20.el9_4.3
• podman-docker · Fixed version: 4:4.9.4-20.el9_4.3
• podman-plugins · Fixed version: 4:4.9.4-20.el9_4.3
• podman-plugins-debuginfo · Fixed version: 4:4.9.4-20.el9_4.3
• podman-remote · Fixed version: 4:4.9.4-20.el9_4.3
• podman-remote-debuginfo · Fixed version: 4:4.9.4-20.el9_4.3
• podman-tests · Fixed version: 4:4.9.4-20.el9_4.3
• buildah · Fixed version: 2:1.33.15-1.el9_4.1
• buildah-debuginfo · Fixed version: 2:1.33.15-1.el9_4.1
• buildah-debugsource · Fixed version: 2:1.33.15-1.el9_4.1
• buildah-tests · Fixed version: 2:1.33.15-1.el9_4.1
• buildah-tests-debuginfo · Fixed version: 2:1.33.15-1.el9_4.1
• skopeo · Fixed version: 2:1.22.2-6.el9_8
• skopeo-debuginfo · Fixed version: 2:1.22.2-6.el9_8
• skopeo-debugsource · Fixed version: 2:1.22.2-6.el9_8
• skopeo-tests · Fixed version: 2:1.22.2-6.el9_8
• podman · Fixed version: 6:5.8.2-3.el9_8
• podman-debuginfo · Fixed version: 6:5.8.2-3.el9_8
• podman-debugsource · Fixed version: 6:5.8.2-3.el9_8
• podman-docker · Fixed version: 6:5.8.2-3.el9_8
• podman-plugins · Fixed version: 6:5.8.2-3.el9_8
• podman-plugins-debuginfo · Fixed version: 6:5.8.2-3.el9_8
• podman-remote · Fixed version: 6:5.8.2-3.el9_8
• podman-remote-debuginfo · Fixed version: 6:5.8.2-3.el9_8
• podman-tests · Fixed version: 6:5.8.2-3.el9_8
• podman-tests-debuginfo · Fixed version: 6:5.8.2-3.el9_8
• yggdrasil · Fixed version: 0:0.4.9-5.el10_2
• yggdrasil-debuginfo · Fixed version: 0:0.4.9-5.el10_2
• yggdrasil-debugsource · Fixed version: 0:0.4.9-5.el10_2
• yggdrasil-examples-debuginfo · Fixed version: 0:0.4.9-5.el10_2
• yggdrasil-devel · Fixed version: 0:0.4.9-5.el10_2
• podman · Fixed version: 7:5.8.2-3.el10_2
• podman-debuginfo · Fixed version: 7:5.8.2-3.el10_2
• podman-debugsource · Fixed version: 7:5.8.2-3.el10_2
• podman-docker · Fixed version: 7:5.8.2-3.el10_2
• podman-remote · Fixed version: 7:5.8.2-3.el10_2
• podman-remote-debuginfo · Fixed version: 7:5.8.2-3.el10_2
• podman-tests-debuginfo · Fixed version: 7:5.8.2-3.el10_2
• podman-tests · Fixed version: 7:5.8.2-3.el10_2
• rhc · Fixed version: 1:0.2.7-1.el9_6.4
• rhc-debuginfo · Fixed version: 1:0.2.7-1.el9_6.4
• rhc-debugsource · Fixed version: 1:0.2.7-1.el9_6.4
• rhc-debuginfo · Fixed version: 1:0.2.7-1.el9_6.4
• rhc-debugsource · Fixed version: 1:0.2.7-1.el9_6.4
• rhc-devel · Fixed version: 1:0.2.7-1.el9_6.4
• runc · Fixed version: 4:1.2.5-6.rhaos4.19.el9
• runc-debuginfo · Fixed version: 4:1.2.5-6.rhaos4.19.el9
• runc-debugsource · Fixed version: 4:1.2.5-6.rhaos4.19.el9
• skopeo · Fixed version: 2:1.18.1-6.rhaos4.19.el9
• skopeo-debuginfo · Fixed version: 2:1.18.1-6.rhaos4.19.el9
• skopeo-debugsource · Fixed version: 2:1.18.1-6.rhaos4.19.el9
• skopeo-tests · Fixed version: 2:1.18.1-6.rhaos4.19.el9
• delve · Fixed version: 0:1.25.2-4.el10_0
• delve-debuginfo · Fixed version: 0:1.25.2-4.el10_0
• delve-debugsource · Fixed version: 0:1.25.2-4.el10_0
• delve · Fixed version: 0:1.26.1-2.el10_2
• delve-debuginfo · Fixed version: 0:1.26.1-2.el10_2
• delve-debugsource · Fixed version: 0:1.26.1-2.el10_2
• rhc · Fixed version: 1:0.3.2-4.el10_0
• rhc-debuginfo · Fixed version: 1:0.3.2-4.el10_0
• rhc-debugsource · Fixed version: 1:0.3.2-4.el10_0
• osbuild-composer · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-core · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-core-debuginfo · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-debuginfo · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-debugsource · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-tests-debuginfo · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-worker · Fixed version: 0:132.2-7.el9_6
• osbuild-composer-worker-debuginfo · Fixed version: 0:132.2-7.el9_6
• rhc · Fixed version: 1:0.2.7-7.el9_8
• rhc-debuginfo · Fixed version: 1:0.2.7-7.el9_8
• rhc-debugsource · Fixed version: 1:0.2.7-7.el9_8
• rhc-debuginfo · Fixed version: 1:0.2.7-7.el9_8
• rhc-debugsource · Fixed version: 1:0.2.7-7.el9_8
• rhc-devel · Fixed version: 1:0.2.7-7.el9_8
• rhc · Fixed version: 1:0.3.8-5.el10_2
• rhc-debuginfo · Fixed version: 1:0.3.8-5.el10_2
• rhc-debugsource · Fixed version: 1:0.3.8-5.el10_2
• skopeo · Fixed version: 2:1.18.1-5.el9_6.1
• skopeo-debuginfo · Fixed version: 2:1.18.1-5.el9_6.1
• skopeo-debugsource · Fixed version: 2:1.18.1-5.el9_6.1
• skopeo-tests · Fixed version: 2:1.18.1-5.el9_6.1
• containernetworking-plugins · Fixed version: 1:1.6.2-3.el9_6.1
• containernetworking-plugins-debuginfo · Fixed version: 1:1.6.2-3.el9_6.1
• containernetworking-plugins-debugsource · Fixed version: 1:1.6.2-3.el9_6.1
• buildah · Fixed version: 2:1.39.9-1.el9_6
• buildah-debuginfo · Fixed version: 2:1.39.9-1.el9_6
• buildah-debugsource · Fixed version: 2:1.39.9-1.el9_6
• buildah-tests · Fixed version: 2:1.39.9-1.el9_6
• buildah-tests-debuginfo · Fixed version: 2:1.39.9-1.el9_6
• skopeo · Fixed version: 2:1.18.1-3.el10_0.2
• skopeo-debuginfo · Fixed version: 2:1.18.1-3.el10_0.2
• skopeo-debugsource · Fixed version: 2:1.18.1-3.el10_0.2
• skopeo-tests · Fixed version: 2:1.18.1-3.el10_0.2
• podman · Fixed version: 6:5.4.0-15.el10_0.2
• podman-debuginfo · Fixed version: 6:5.4.0-15.el10_0.2
• podman-debugsource · Fixed version: 6:5.4.0-15.el10_0.2
• podman-docker · Fixed version: 6:5.4.0-15.el10_0.2
• podman-remote · Fixed version: 6:5.4.0-15.el10_0.2
• podman-remote-debuginfo · Fixed version: 6:5.4.0-15.el10_0.2
• podman-tests-debuginfo · Fixed version: 6:5.4.0-15.el10_0.2
• podman-tests · Fixed version: 6:5.4.0-15.el10_0.2
• buildah · Fixed version: 2:1.39.9-1.el10_0
• buildah-debuginfo · Fixed version: 2:1.39.9-1.el10_0
• buildah-debugsource · Fixed version: 2:1.39.9-1.el10_0
• buildah-tests · Fixed version: 2:1.39.9-1.el10_0
• buildah-tests-debuginfo · Fixed version: 2:1.39.9-1.el10_0
• grafana · Fixed version: 0:10.2.6-21.el9_6
• grafana-debuginfo · Fixed version: 0:10.2.6-21.el9_6
• grafana-debugsource · Fixed version: 0:10.2.6-21.el9_6
• grafana-selinux · Fixed version: 0:10.2.6-21.el9_6
• grafana-pcp · Fixed version: 0:5.1.1-14.el9_6
• grafana-pcp-debuginfo · Fixed version: 0:5.1.1-14.el9_6
• grafana-pcp-debugsource · Fixed version: 0:5.1.1-14.el9_6
• git-lfs · Fixed version: 0:3.6.1-2.el9_6.4
• git-lfs-debuginfo · Fixed version: 0:3.6.1-2.el9_6.4
• git-lfs-debugsource · Fixed version: 0:3.6.1-2.el9_6.4
• git-lfs · Fixed version: 0:3.6.1-2.el10_0.4
• git-lfs-debuginfo · Fixed version: 0:3.6.1-2.el10_0.4
• git-lfs-debugsource · Fixed version: 0:3.6.1-2.el10_0.4
• rhc-worker-playbook · Fixed version: 0:0.2.3-5.el10_0
• rhc-worker-playbook-debuginfo · Fixed version: 0:0.2.3-5.el10_0
• rhc-worker-playbook-debugsource · Fixed version: 0:0.2.3-5.el10_0
• golang-github-openprinting-ipp-usb · Fixed version: 0:0.9.27-3.el10_0.4
• golang-github-openprinting-ipp-usb-debugsource · Fixed version: 0:0.9.27-3.el10_0.4
• ipp-usb · Fixed version: 0:0.9.27-3.el10_0.4
• ipp-usb-debuginfo · Fixed version: 0:0.9.27-3.el10_0.4
• yggdrasil · Fixed version: 0:0.4.7-4.el10_0
• yggdrasil-debuginfo · Fixed version: 0:0.4.7-4.el10_0
• yggdrasil-debugsource · Fixed version: 0:0.4.7-4.el10_0
• yggdrasil-examples-debuginfo · Fixed version: 0:0.4.7-4.el10_0
• yggdrasil-devel · Fixed version: 0:0.4.7-4.el10_0
• ipp-usb · Fixed version: 0:0.9.27-7.el10_2
• grafana · Fixed version: 0:10.2.6-24.el10_0
• grafana-debuginfo · Fixed version: 0:10.2.6-24.el10_0
• grafana-debugsource · Fixed version: 0:10.2.6-24.el10_0
• grafana-selinux · Fixed version: 0:10.2.6-24.el10_0
• grafana-pcp · Fixed version: 0:5.2.2-6.el10_0
• grafana-pcp-debuginfo · Fixed version: 0:5.2.2-6.el10_0
• grafana-pcp-debugsource · Fixed version: 0:5.2.2-6.el10_0
• host-metering · Fixed version: 0:1.4.0-7.el7_9
• host-metering-debuginfo · Fixed version: 0:1.4.0-7.el7_9
• host-metering-debugsource · Fixed version: 0:1.4.0-7.el7_9
• host-metering-selinux · Fixed version: 0:1.4.0-7.el7_9
• rhc · Fixed version: 1:0.2.5-7.el8_10
• rhc-debuginfo · Fixed version: 1:0.2.5-7.el8_10
• rhc-debugsource · Fixed version: 1:0.2.5-7.el8_10
• git-lfs · Fixed version: 0:3.6.1-8.el9_7.1
• git-lfs-debuginfo · Fixed version: 0:3.6.1-8.el9_7.1
• git-lfs-debugsource · Fixed version: 0:3.6.1-8.el9_7.1
• grafana-pcp · Fixed version: 0:5.1.1-14.el8_10
• grafana-pcp-debuginfo · Fixed version: 0:5.1.1-14.el8_10
• grafana-pcp-debugsource · Fixed version: 0:5.1.1-14.el8_10
• grafana · Fixed version: 0:9.2.10-30.el8_10
• grafana-debuginfo · Fixed version: 0:9.2.10-30.el8_10
• grafana-debugsource · Fixed version: 0:9.2.10-30.el8_10
• grafana-selinux · Fixed version: 0:9.2.10-30.el8_10

Provenance

• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-32280.html