RHSA-2025:14397HighCVSS 7.1

Red Hat Security Advisory: OpenShift Container Platform 4.15.57 bug fix and security update

Published
August 27, 2025
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2024-6538 →CVE-2024-45339 →

📋 Description

CVE-2024-6538 — openshift-console: OpenShift Console: Server-Side Request Forgery CVE-2024-45339 — github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:46ae034762a363302aedc794b340a2d3255035d3f55cb03caae04ec65add49fa_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:616b3a28b302948f36612f3e0cbb9bfee912cecd8a96b6312007a94327eaaf98_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:61b7d3f53bb621a9e8c9261ca85483e71224d17b9e40f656c87a5a9a1957dc19_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:e75fbcd5103162234c14871108da85ab9b55d7f74997c49f576ea937ca75b965_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:254b01ab3a82ee74f50c131ebe2db8b165a3069bb56072a056d542c53beea11b_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:488d41e94ebc3d44f734aa845c2d8097eed7189877c14fdd7e4e99551436dd0a_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5fe11345276c4b5df85efaaeee285272181791162dcd87d51124d9881e5b9d33_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:6c610eef8579ed932ee898a3f98dcc59d6074ff2e72247dada691ef027fa6c56_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:3a08e51eb43366670f746ea6eb8b05d7a743399df68e09ef80c50c8893d7a8b9_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:5df64f329295fe3bed77ce07e41924a260ccb9916ecc2c8bbd3b999a9a931c50_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:dd1e43366eddcea467a153aef2a647897052a939eedebced6012ed23184124d4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:f6a38c36e1f6ecff241f050d88872de1f285eaa5793872823f5e51010e08e216_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:18f39718ae94b0816652e888db2d5695c30bbafd5d5a445c6ad3d32dee86bf07_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:2ef80aa33c7f459b7d28efecca86740aa91062392cd1299d12a467b4568a8e6f_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:fba5173ab6242da897008dd98019297e8e288d5df97e2bf00efa9a3ad6907d9b_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:fc8bb9a721b8bd8dcef8f7f225433b1bf27b13d7702af3abfb01c8c3c46a2bce_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:0af3a2f462bde26480130877b8ac396b48da610d5cbe0f0ee94918ab664c4372_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:3180f13a9df163e0871628c4ab8a92838847fda22b5c5bd578f23e60655dd261_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:4c7a7e43418bb1b12fe370488421a66122796fa00779d4035844eec8a9583794_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:b6f4a29ebcd4e2382aa6960182cee38b784a1177caf54b85c80d032d5a14cde7_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c44fcc1c99c3930c5b7bb546a3812d52e2dae81da841accc85cec3fe9d05316_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:a0006538412843937d5e927010865b1bab4b9edffd18ed606cab414cb6a17691_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:bf7a969245fd9b5267ed71973700eb6d00e067c838981ab3b5722feb38ea0694_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:cdbf03edf704f35ed4afa247ff197ecdd54f51be2aaea4ec4ce427a3b7469e23_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:1803ac7e047ade6c37428f9d76ad66736ed1d6868679816eb27d33b8e8067e0e_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:3460a7fd8fb492cb8d10ee9841728d7ad4d4b30274348df0401abb3a73b71c4b_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:52ecae2c96e2371602419fdb5b2a2f0681910d5375acaf8eca58196d16336ed7_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:94e23648b7957d55af61a9adebd60fe63397136807be4a7ab7fb93aeca87a9f0_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:197fed1a7a58902028eb07e74a34035ae10cb81d3af5693f48cf71a28d819cf4_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:dfeabcb6b9d567eaa9c6a32f0e20cc547e0fa2e972963e5cef6e9c15838328f9 (For s390x architecture) The image digest is sha256:0a007b78ea7e6e6a4625c34e7783687a04935462d9b41eafe8663613b31eb753 (For ppc64le architecture) The image digest is sha256:b77a48cdf0b9d89eba520588ffcd99268e3edeb56627e17395b223ca3faf8da1 (For aarch64 architecture) The image digest is sha256:5eb9c8cac53b255dfe62cea367ff461ecf8aff32aa858df39d898e7ad60d06ab All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)