RHSA-2025:18242HighCVSS 8.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.61 security and extras update

Published
October 23, 2025
Last Modified
August 27, 2026

🔗 CVE IDs covered (2)

CVE-2025-30204 →CVE-2025-53547 →

📋 Description

CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing CVE-2025-53547 — helm.sh/helm/v3: Helm Chart Code Execution

🎯 Affected products39

  • Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/frr-rhel8@sha256:8c6933f4a36a0364b39cca4071de6c68bc640e65ffb9ca92d908df45a4c6e462_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b8c4ce04d2fcc540a76397e401bf6db60c4ef3d086752f2c84122fa9ada51f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:41c630795ffc6e341c06c33918f581edd15d71c419b9481c486fc6aaf11f2f3e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/metallb-rhel8@sha256:389a254ca74176bfd1a28c105e3a9b5f4b444986254538e6ced00a2205d3e621_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:e56234dcbafd102313402cdf923efbe786ec2e1aa3eac7faa13e5ce22c459f60_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:fc8e01b423979e479bb2c1d08d331076a521a903a109d8360ba6bf151b4b57f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:da270051ef32441730d625681905414bf53fde16d8c6d7658d079b944470e1e1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:e85195e4157498aaed10046d541dd879ae1417832b2377e5bd0812d63d434002_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e85195e4157498aaed10046d541dd879ae1417832b2377e5bd0812d63d434002_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cluster-capacity@sha256:fc61afd8a830769dfd025c573f75c68794fec1e7015aa8badc64a6b96869b7fd_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:214fcf9937f352f94c1ffa5faa7491c130d6e2b7a51e9787649ff222b66dca78_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:8dd8c5f2324ce79adf8bab86394ea1e1f16af7f1169b14e7f5d88709dd7da1cf_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:51cb1a7e7a598c319d0d67fb965f80bcdd0908b5ecfb029886d82764c86d858a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:4b3f52c199ec4739f3f71e21437b9b2d9aa4b7b4b089fe2ab71a128a66313276_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:a746a5f3fb65e609469fe62abb2390eb02330b7e87e2cde9f6af1deea6f38abd_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:28d935b5a690cf627b2fa3eb54557e3edb5fb3c583d25fb9b441211518a81d55_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-router@sha256:8081341b50f3910d1927863c0b406d408046398eb27bcc85e7c21620ed0edc63_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:75467650dc42b1116852242a1b4614b7b98d8219c744d8edbac739619ac4fc96_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:078b8f29a60d1122a3575564955c764d195dfe09f806e9c28eea59a2c43241c5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-helm-operator@sha256:4bfcd0bb3c03921a4acb730c1f207399cea67a981a8ce9a63c9455a16f558e50_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:c1b31a80e12850ffb88b0bad8e47d4fb646afd4c4c3fe60c3058fce265b321d2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:99b2c2e0f8ddb23e34fc12bff32de5d2b5c66d1b71d3cd5981bdab98e5979827_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:0bbb1a044ef3af51d653cec5d9f482157c0a4fa51d2b6a2a0c888722f93402c6_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-operator@sha256:f502720c09c08150dc3d36d503700881377b8117262f49d8d72c6c61459a0cae_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:d3d5c47faf993598cba65e74992c5fa2bda7bbf6ed033a1a54249969f361c0bd_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:fc897ed2d1d89a346995121242f7da7d97dbb031f60db193015066aba49e086b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ptp-operator@sha256:95e0150645e33abeca5376b114e558a3460f4fae1514ea362ba4897bf185cba6_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ptp@sha256:4b53760cf11aa215adf1b93f4e33ea8796701b5faa14780a245af7825bc1c83d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:1ce1579c5e7eb8b50192c92c2a3c26c396041b3bf4844d0cbb05e14352c924ad_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +9 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes Workaround: Red Hat Product Security does not have a recommended mitigation at this time. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)