RHSA-2025:1710HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.15.46 security and extras update

Published
February 27, 2025
Last Modified
August 24, 2026

🔗 CVE IDs covered (3)

CVE-2024-45338 →CVE-2024-56326 →CVE-2024-45337 →

📋 Description

CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-45338 — golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products160

  • Red Hat OpenShift Container Platform 4.15
  • openshift4/frr-rhel9@sha256:179c92719b728fea12c83cb2a213b1efe08f3faf4c84e538be9d70a9d6610cb6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/frr-rhel9@sha256:1a6fdc842bdee937faba891643deb550cf2cfad690df79fcb63ad2d6cd1ea6b4_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/frr-rhel9@sha256:36e5677ac5e615e2f794f684d663af90ad7d587e55a5aaebc8fd9a547d45af09_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/frr-rhel9@sha256:c99a19f51b79830d56f1cc6639c5b689987d963e72b3c98a58732119f831d55e_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:75159b34761f26432767f8d3e04a02e3207edfaa3f89b04fe73a04bd5fec4a0c_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:8fd57964d3c97cc30c8c5e46baab08d3b2038e7ee8531f3ee6b1a67f4885f91d_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:aeeed4b3d7eafb570c56a400a3bcba33842deeaa9ec457cf6bf25d176b551e30_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9-operator@sha256:eb17bde2477f25d1eacda5dd204017490c4d96850b9acf16e3c4e676f7108bbb_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9@sha256:62b4f26b6782f2d8d755e5cea898fe7e002c8109140500eef9f5b4139f4115ce_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9@sha256:7bcebaedfd0af87c637a37ca4ecf239740ac30c5dce9146d404649f67b5814be_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9@sha256:93526f1a130adb6154c28bc8ea9d923e60406fb5a66181eb9809bed0b2e73d61_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ingress-node-firewall-rhel9@sha256:c24beeed3256d1180ca564f7c17e1fdbfafab5f8e90a3dc554e70367f0d57abf_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:063d6bc322df62150fc7147f2a35c2420de9ee3b4d0b0258a9045cd5fc13f9c7_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:2d090a33573524f255ad490b19345c628737fea510e2c4e2543a01ca7d2c0b49_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:58c2c394b6ff147b944de430b9f14b877cac19df1492b6c6b6b4a7562ef28424_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:de90e7c8ea3a60a39737ed8d7ae5307f50ce6ca3d9839b91827c30e05057e5d0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9-operator@sha256:49e1e60888c3e85281a190660a0792f36debde917c7cdfb70dbb68b7ce15ce56_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9-operator@sha256:51f15069799d24bb99ccf2095e86076e5cfe91f6ee88a63e4649e7e6ba415f4d_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9-operator@sha256:74208173ce15402001bdf1d95a89b5c777ce88ff24b754b84c08a13cfbfc2dd7_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9-operator@sha256:d1bd1e777e2959d11cf19e7b7caa13feec3509a5b1e88de0e69f6179e8b87ab8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9@sha256:1fc3f2420c0df28ac479220a6632b9ba15b1f5005aaa1253b34061eb5e866cf1_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9@sha256:47d42137482602a9505f03c4aacf7117b57a52926a0d5b2b081ee5b7788bbdf6_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9@sha256:9df95567296b70187eebba7d46f922af6b6b4296ebf684551cf1eca28c4f187a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/metallb-rhel9@sha256:fa275f9218af58066774d3aa932b7784ca4a8b015386fe6b9588397a310b2b3b_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/nmstate-console-plugin-rhel8@sha256:1036876597b6a3e5ffd25f36861f1933784f3a719ee981885686f05425b300ab_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/nmstate-console-plugin-rhel8@sha256:38aa60323650bf30080ac5182969bbe53158fec51609fdfafb9fcaaf58be8415_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/nmstate-console-plugin-rhel8@sha256:8876a5e4b38a741c72e610f699ba03932a94f55c4735182a1207e4fe37c92279_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/nmstate-console-plugin-rhel8@sha256:cc01dcf4eb33e274dc3f69a2226b869975b6e97573b6f40b59e24f1c1f182881_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • openshift4/ose-ansible-operator@sha256:706642fbc696a3978f6b6e9af565f2e67fe2c030861072062c2a60cad855d4d9_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +130 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html

🔗 References (6)