RHSA-2025:19047HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.18.27 bug fix and security update

Published
October 29, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2024-48910 →

📋 Description

CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:34e2bf411ca7b4f77d4bb8b1361583a2aa9362be3010001a9fb7246a51d30683_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:93444064d1707591de4607207e0d89d8eef417e0981fc6a30c7b7681c3e0b615_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:aeb1a6f06d31faf67ce1854e92ca0bc88588a01350224eb43bb84c9e3f1edcee_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:c1608276457870a16e65ffe85f485e98bcd6c27de04261bb393781205ef748d6_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:31cb2cc8c79a9bbba50da05a41a61c39fab2421ce8735369f81410338e4be0e8_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:79ffa97201ac533eb9dc63260946aabe2519d01caa98c141bcaeacc6567278b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:968a0fe14b6c2b495dfed202f4da3c1f5ce5ab701b15c1c1cdd4388176fdf9ed_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b991c78566941687c0a90038ff79ea7974f0c34a634358371908713c2af8b71f_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:1b28451982a5114a3e3180ba0d03a8221257c337d2863b49ca671da8735e7910_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:3a1532c50cc214bfb9276b5e45e0b8548eff0207bdbcfeee20af218ea2822791_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:980e3ccd2844ef77dfcd6c58660eff4bd45515e70d8f8fea3d006c3344961d6b_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:cacb0e876e94f0a8c2c4a921beae723de554da10677be6d66b62bef665789dac_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:2dc42ec15e3ecccc0942415ec68b27c2c10f53f084b6fa23caa1e81fc70f3629_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:6f599e3c173309af537ba3cfdb131b285ef7976513c466997d43e307a03f7ea5_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:e460a215f6093cdec5262fa1b1308d24ceb1b50cd725d713dbcda5f14b79bff1_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:fbfd42bffd202b2d4ed7b69188059400bfe39fd058b50a288f8f8e024e8c8b82_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:32b7d44810b0b9cc65919051cdac16e9fbdc8bf325b50d6a93b059a9dea95781_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:4b3e27877a3cfb218ce3a7a5163748ca4f3cd6c77774180c8824364498347763_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:aa9c6da7152cb8028d683744096955bacd757e7d8de3ac9a2e258b75a731c0b8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:b6dd5aa8150fabe9a6c265dd600338a4f0f27f1cec596243c88bab4bc1c50457_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:053bd98282abf05a06fbc376e73e115d860a1879b63a65148ce6b92974608218_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:36edacc5167d38c00fd6fb0150d5f91535ac8b7e43c218ef275032d5178859bd_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:470966c00cb3258fa78d122ed19971a385539435801ab7eb1ea133d173a9f8b7_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:835266d237774df7b12dc174f9d71854099d31bd3e5d4173a50a16e88a32a718_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:389176c12ecfed45b37ef7a4071fceb89e9bd7b57b100364403cc235db79444f_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:78df73f12696c7ac232e29cb77a8309c164d7a0bbe3b9ad39759fa8c0b6d561b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:ceaa4102b35e54be54e23c8ea73bb0dac4978cffb54105ad00b51393f47595da_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:ddca05cd371580279efcfc12862f27e2ce1c6ac03847f01c1eb56882c6f48c90_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/frr-rhel9@sha256:0b02e4aab139653d7e46feb217b3a02062176bc679c1fd0250b47a107d6c27a7_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:4686c8d26194f890c2a241271d41a762d4be26af0be60e9cfd0c563f61b3beab (For s390x architecture) The image digest is sha256:347f519159ec36a0484e62ecddab7b5aaa3259eda7bb03c3fb3b295ce999d380 (For ppc64le architecture) The image digest is sha256:004463644cdeb879134cf7b0c59f55d7ae74694d6580fc6dedf05d0c51c5561b (For aarch64 architecture) The image digest is sha256:1045c0fdb163990ee75ad950c1a2760b8b22bf8616a32bafad5517bbd93c0219 All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)