RHSA-2025:10270MediumCVSS 7.6

Red Hat Security Advisory: OpenShift Container Platform 4.12.78 bug fix and security update

Published
July 10, 2025
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2024-45497 →

📋 Description

CVE-2024-45497 — openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials

🎯 Affected products193

  • Red Hat OpenShift Container Platform 4.12
  • openshift4/cloud-network-config-controller-rhel8@sha256:edfb9d8ce57197d7f20303dc813e80a19457c98fb4cd66c9f6ee7174807b7ebd_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/driver-toolkit-rhel8@sha256:3a26208b930491f88b62bace05460dbabe6ea37d64f44d0f7118e8e40d821c4c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/egress-router-cni-rhel8@sha256:0b0d2297cc2e1bdaf3a290f6f3d31371cfd67ff3e6912bfe4b4bd4540ee3fe9f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/kubevirt-csi-driver-rhel8@sha256:1814905a10725186b727656e6837851c3c024125d4a422f9d3d6c7235f3db332_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/network-tools-rhel8@sha256:48848da4958eefe94d884853d654de46be205ef88c0f0493e5b9d6f68071e5ba_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/oc-mirror-plugin-rhel8@sha256:cc7ee04b98eb95768071a3878f68584e4e9323a694febe93a043f463fe83982b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/openshift-route-controller-manager-rhel8@sha256:de95cd7a96ed256028e2b502ae3c8bd04ea85c1e8463b87bbdf984c6ea9ef560_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:658eb99fac00a6a231104b6024ca22c1a08f32cdd0e4f1ec4d912124fed045ed_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:1347bec9cba612494f06906c044494995a8a021b4dd58aa8e2dfb3564de24bc5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:46b86904181d1f83b1acfc3098a067a4887c2f13ba44f34960e0506f76b91eae_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-agent-installer-orchestrator-rhel8@sha256:d4263b9a7fa83e366306fa98610673b91394a08ad2cd001a66d2aff8bbea2d9b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:7a057031dd7051607c18964aa1d24557fe1b18df2abb046a31e562d03ea5fe4c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:215167d2532ca7e8247848963b510488a1dd1596c665ff03d3c375a769bcc361_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:42d6fce0549cf459c8ebaa9cdbc5990d274e7a0c7c566806ba09aa8953e7f3ce_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:625267c49a8f5a19258dc47beb8bf19fe110ed6d853e6592109b7bdd1c0c4a03_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-apiserver-network-proxy-rhel8@sha256:bb241fdcea89dbe57221e38626931c7a895b1efa6f9fad793a2c2e065fa7f726_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:191e2fc957d65b237e39e55896b374fd7c3d45567f237ca67608b75b6ea58978_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:c357c0bd129402d3d9813133127818b4e807134f8b9ec60623f403dfcede34a7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:bc2b153f72755d0c7746015df5a601900af6dfd481f6047d81c370284519c29e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:c9cb1016ab005482e33bb6b303df3847dc370d8577a4bf70be2da8c70320bbc8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:8c7aa63b01885ddc247a3a06ca75de4a46ea8ee930f2655b2db9f809d4c97c75_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:7ed1504c43650bc1a045f2ec787851a7773ac3c73dbe1d876743c1a211e8169e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-cloud-node-manager-rhel8@sha256:5cab1a1405b301f30dea3150bce34dcf82b1a802a448a14f1ba8578f21ba53df_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:615a3104e8456f6576228a42987bace6643850e591e8e551220202b9f064f56b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:51ab5c13316cdf7817dabbd4b549a0543d46445280869f01dd27d322881a9ec4_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:13fbec97386abd0a417e4918117c123227eaa70b27df03a555df03ab2265c7cf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:1ed778b322d37446e48bf54f219164edd5318d03641086b6a89e39588035d8b8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-azure-file-csi-driver-rhel8@sha256:d4b14f64db33f25f6b7ea209c1ee44dfa3ef57b01ed2d6515829a0caefabcd66_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • openshift4/ose-baremetal-installer-rhel8@sha256:0757e10670952be7ff234546fa7ce8d8fcb326e46981a2cfb4204107cc76c147_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +163 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:81d745deb3561a5df5bd3abdb4baa69a20efa917961d12c0facd7809e9bec414 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)