RHSA-2025:10747MediumCVSS 7.6

Red Hat Security Advisory: OpenShift Container Platform 4.13.59 bug fix and security update

Published
July 17, 2025
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2024-45497 →

📋 Description

CVE-2024-45497 — openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials

🎯 Affected products194

  • Red Hat OpenShift Container Platform 4.13
  • openshift4/cloud-network-config-controller-rhel8@sha256:094e01164fae27b6456556fbca6553153d8957d850003b29ea90c46423e6ad28_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/driver-toolkit-rhel9@sha256:225e93c377a9b3db2c3fae488b0af146b3d52701fb051b452a792e25ab4019b5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/egress-router-cni-rhel8@sha256:8a5d7d579917231728a7b4b5dc91df7b1ca2491b63ef0ac13243147598324461_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/kubevirt-csi-driver-rhel8@sha256:c1e4b3ee09b63d050bf62c8ec9725c53452bd6563ba99d7d0511643f0571d689_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/network-tools-rhel8@sha256:b3dcc98dbccc9c5fe3b64718040a44f0c8c28f0e9e33f3dad1745951724d6c2d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/oc-mirror-plugin-rhel8@sha256:5a45377fc511a6c04b9d57ec575bcfa06b0585caa49ee9f0d6cc1bb0656a5563_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/openshift-route-controller-manager-rhel8@sha256:58d82dd25cdbfbabd1fcd72621b4c85a912d9e127c36f1f8d8e3d3518d9bd23d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-api-server-rhel8@sha256:8895b558a05800769fbc25f5f4c90896690490cdfb258b96a3893bb6eb002653_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-csr-approver-rhel8@sha256:eeb6603acc6b26d20ee31ea006314b9bced42d6394e2ae575aaf4a4804c52fda_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-node-agent-rhel8@sha256:1ddb053d4c8549826d245a596639e1518f6fedd3a06a066bf35243aa05afe040_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-agent-installer-orchestrator-rhel8@sha256:ba790f9f004a04d91c671aabc65ebf12cd6508ccba52c9eb63961a2222d499a1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:e764ac278d8ec6daa75d5231d8ef4c209b177a355cac989ec0d016c036f0be4f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:54cab31d870455c7c027792f34a1026ecc0804f46ee018f98f568ff3dff7bdb9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:77548312f4d9a58c61a7e4cdaf4d437e75d2fc5997e1da1523892b5cac400838_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-alibaba-machine-controllers-rhel8@sha256:a4ffbbce7b2cde7e315980c1a27d261fa6c0634bbb12e52ce2a692bae82bc387_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-apiserver-network-proxy-rhel8@sha256:746ca06e1fca1c892d83b535759df64c6572a5b4448f2f1e7367af23884d7abc_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:381b5f694272e2a026a8a7812ca382fdd8f96a6a58b9dd070e110e7e31fda1e0_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:9739e1da36958dabc2b49a469f0045fdf79f8bb09fb4e81045c81fb7f8a9181e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:49ead93ac909d419cd213f13edd21a1ab79ea74a7eebff7730bd80a341701c39_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:cc727c8c6f2e09b3642bf8d926726a5d927bffdbb8ca22c9a0000ba200208a5c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:2eca33b37197f1263626a8f362f739b0b73f94fd45ed05cbb7d80cd1c00988d1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:40ce4157fffa063319225ee605e362f318d8a90ed10ca0975d688c46bf9cc677_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-cloud-node-manager-rhel8@sha256:d78045cb629230d139657952ea3e058fe4f7d7c20b1bec79fc8b381e03c50893_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:b830bf137376b1503148c4645d78d0d5badd4da3893cc7328b09f1d35a195457_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:6612ce12789cf6e593d7912675e898f7205d96445d4b12332e89408111539eed_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-disk-csi-driver-rhel8@sha256:8fcd80c0f4d0e23fe9c0133bec5ba203c3ff3556163a5688e7ea731aed6e6a5b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:e11a05833524567e8efdb9a8b762b6c05c49585ec738bf96f893278b75c69adc_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-azure-file-csi-driver-rhel8@sha256:e24c1130bd83a2e472c5d46254b1be87ecfafa853cc48e6c70b55ee03c01cc63_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • openshift4/ose-baremetal-installer-rhel8@sha256:beece91a06d73d6234fcd1a9ae910ad31fa395091fef083b0c4ff7b9a72977e3_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +164 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architectures. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:48a6e945ec773cc836607c47e7c0d99b58a28e98a55a41879c664e7f759452d8 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)