RHSA-2025:17672HighCVSS 8.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.81 security and extras update

Published
October 16, 2025
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2024-45339 →CVE-2025-53547 →

📋 Description

CVE-2024-45339 — github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog CVE-2025-53547 — helm.sh/helm/v3: Helm Chart Code Execution

🎯 Affected products41

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:f1c435c1032a92ae1990e412713d491096f31ed5bbb44d45f476e506fc13950d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/frr-rhel8@sha256:0b2b021705c63abfc5e27ce64c0b1a28d6e4de0cbfd2cad34893976841a10e03_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:4fe5148c51626ccd3a49034b0680ed24e5e052aa1f6efb2c8595a271f43d20ae_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:1d95db7cfdfb31443213d444edb8a4592634a171607c3dbf83b6e5c85d2ec3e2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/metallb-rhel8@sha256:2a89ef2d5fb66ee9ef35a9a807d9bc7c5bc1fe1675648a39a74c8f580e705ddc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:44885dc036ef65bc0b7d23c32440dc9d02e78259102218ec794ca053c96e7a63_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:9dfdfc0fb4d307ffc60bac69ce253a6f52dfb5b0aa84bb56ea623c5e67fe8932_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:38cb007a9dc7a83581ab0d8491791635025d64734154572e66ef5224c5bb65e8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:f1c435c1032a92ae1990e412713d491096f31ed5bbb44d45f476e506fc13950d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:f1c435c1032a92ae1990e412713d491096f31ed5bbb44d45f476e506fc13950d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cluster-capacity@sha256:d9b9d57a30c4751c672a702b9cdd5e3482efacc2f5450ec543e3573f69fb46fb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5ce595ace9e7727d1293a549c489827f65c5b0416bde52682ceb363bf85ea365_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:f601719c8dd87115da60f7ebe3ced44d7c513956277d2e3268b7674c8abf854c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:a093481c5fa5abf8ee49c3a89abffd4b84a9cdbf07e5d04ccbd4a5240353f73a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-contour-rhel8@sha256:497403754bec854f310c45d9dd0537c84f7707ec8e388635a7b70c1aea247244_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:e705826f2984edb99bb857a20e748d550d761f0de5eb930a1a469bbde46064bc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:33967aca174387cbf1d865c58cc6691ae4627a83202db6f74b2371c54bab2d0e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:6b4e114e8c730578f93bf34cf59f0b71d645c05c3d2068eba462445e8d5ba7de_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-router@sha256:494124a985e1a04301bcdfea0fab8978d0f56ef9fc34b1ff693e5f5d5b916561_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:7cfc44bc54419538350c7e5f40e514985b75d4d974550167f557ac8305e21ceb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:a3a38546c653ac3e44ea2e2bb37fa871697e93efcf893df7ccedfd6c2e22f351_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-helm-operator@sha256:736509017b2c44faf1c8ae14b9d040f283c7ae8861d665f294e7b871b9f9e823_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:4f78befd9b862e044dcac718c40d17e1812baf4b9134bd4a29d26524188cb3f2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:0d13fcb88684ebaa9b01f3972ae3129b6767bd03a3b65588b0205aecc61ed8e9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:17e1e6f33767853610f588906a539795005cbeef230ec9144ad1fd22547f8588_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-local-storage-operator@sha256:6ec0762a66193c3cc05f31935134af8d8e88074e26cbc4651ed2710f6ed2e704_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:69508caaa06f1d2170da8cc981549938c895c376d4427446eb2d841b5c15f76c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:863a9233aefd67002705c85691eb74452d7a41dfcf72423dff251dc652338160_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-ptp-operator@sha256:5121e43c81224b3e9798b622e849f22e61d0eb297a1a210046a0a907ce5ae861_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +11 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)