Red Hat Security Advisory

RHSA-2026:90271

OpenShift Container Platform 4.12.102 packages and security update

Released 2026-10-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Ironic content for Red Hat OpenShift Container Platform 4.12 openstack-ironic-1:21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-api-1:21.0.1-0.20261012095526.c95b83b.el9, openstack-ironic-common-1:21.0.1-0.20261012095526.c95b83b.el9 +3
Red Hat OpenShift Container Platform 4.12 cri-o-1.25.5-38.rhaos4.12.git2e7f657.el8, cri-o-1.25.5-9.rhaos4.12.git6120b13.el9, cri-tools-1.25.0-8.el9 +18

TI-2026-78632 CVE-2026-111943

LOW 32

On most platforms, Go uses the given system root certificates.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00396 Published 2026-10-21 Partial fix · 1.26.10, 1.27.3 CWE-299

TI-2026-32788 CVE-2026-44918 · GHSA-q458-5jc4-vvpg

LOW 25

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00408 Published 2026-07-10 Partial fix · 29.0.6, 32.0.2 +2 CWE-862