Red Hat Security Advisory

RHSA-2026:0331

OpenShift Container Platform 4.18.31 packages and security update

Released 2026-01-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.18 runc-4:1.2.9-1.rhaos4.18.el8, runc-4:1.2.9-1.rhaos4.18.el9

TI-2025-32660 CVE-2025-52565 · GHSA-qw9x-cqr3-wc7r

LOW 38

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00811 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-22394 CVE-2025-31133 · GHSA-9493-h29p-rfm2

LOW 37

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.01245 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-32917 CVE-2025-52881 · GHSA-cgrx-mc8f-2prm

LOW 35

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00801 Published 2025-11-06 Partial fix · 1.2.8, 1.13.0 +2 CWE-363