RHSA-2025:19017HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.16.51 bug fix and security update

Published
October 29, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2024-48910 →

📋 Description

CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:bc9c20b8a366b47a3c3ce132d03f0b4378d034889d8b0121f396134597fb6209_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:edfe2a56a3d20da4644f8df3585761beb4d9bb91d698eb45d649c7750219c8c9_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:fadad60ddfcddb6001cd2dd0e50df2aae4523208061a86013cd046a91367dd75_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:fbbc21371296717d3f45c5f936fe5c295b5377f80686624b1f3506578366de06_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:2fe4d70ac4b4c890c0d3d12006707d55256251cc0601cc8e64f0d63e9065a819_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:50cc7e7af647b4e99231da11c125498271b2d93d69f230e23fd654dcdb6c8efd_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b5ff02050ed4bd8d20dd59800fa693466661196d423547a7d7847b8533d8f8d8_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:fa33278dcc31befd310c4d6c5e2d9e21b4963f6afd91700957ce2832b7baad52_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:294d503471df6c60ba24eae35f3552490ae326191f11114866da4eea5492eb95_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:3105c2c4c0298b5736616af1e0e16df5d14bbc4e691ade57fa955e23e0e2883c_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:3bd20e0df86cf6010807b2789caedabbed5dc6ce93b796b3451988c28064665b_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:e55896dae5f6a992754fb3acd3a874a2e9e6085bf39bad98bf4cf3cf3d2a3647_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:54b1a3f4041248598e196348b6aa59731f2c1022df37fa539d1a0423df24336e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:604ea94c74675f8a2acfac1886cd7c3bb124240ee4d7d177c5ea9b9f172fcac3_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:7c4c97088416dcd1947472990be3ec1f112ebebe6eef74c3dcbdc0b583a4ad16_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:dedcb767db43fff70e86f157d3c24d6eb067fbc29084bc5ff18165677d3d9571_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:10e974000cf7c0bc219789099723404677307a34142e3c539fa2a0ce07fa61ff_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:17a5c87e334ba598d47fd18ea04dc2101449980d118e8313d9a03e201477d337_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:45456faf6939b8905c500c7116a01c99a41de173630f5fed325bac8dabe97d44_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:7438e6a8e12c3f0fa7ebc7bc18dd88de5c13a10d931a121ef5b1c8f63a76b4ce_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:5437fa3fbb4d32a937e45e2381906529b99d2abbebe5458b853f69c2896f5b0f_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:7da4bfaf03c9202f527acc6d93a5ae1e7b9eb1d4c1ef1051f17d637df7a2f0b1_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:a063a5fb9b543852666d3a5a926421b36dea4757e6da1bf5d11a53ae731cc518_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:bdef7c37df71df086eaa376ad0b4c3139a83e70c20e066afbf2f2174d6a3a9f8_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:1431aabc701f635d705a5d95612f7ff46a1596919d8614057bb7e1e1249933ea_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:76e640f1e420a680438693064ebd6e74a53fb602206d7c731d2879df2c7368e5_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:7fa8ad03c46e905e44e4f4f710b78dd9c2eb97a0ee57a889b83c87744af1369f_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:d8eb8c9a657725f49dfe4288cf7c6104d3444ed341ada94bc18d76069ba52d10_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:49ef1b6a2c49a26015bf1ed30c85484de8d063d9667aa4b4b91ab691ea727d11_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:49d83378f39afe7f13c1db8f46cbf757ddcc84f16737a2e6d8eacb1f2004afd0 (For s390x architecture) The image digest is sha256:c980b26aa7567bdeae8e57d2f0563d02a872fc1db58c5b04cf763db996baf2f6 (For ppc64le architecture) The image digest is sha256:4fd7b631a65b0693adbc5de765029c3940986774cb272a28ad0ebf5efc0e51cc (For aarch64 architecture) The image digest is sha256:ede922bb388be2155274002c5f88d755e36200f259706299e5cd3a3bd89bd0cc All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)