RHSA-2025:19058HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.14.58 bug fix and security update

Published
October 30, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (2)

CVE-2024-6538 →CVE-2024-48910 →

📋 Description

CVE-2024-6538 — openshift-console: OpenShift Console: Server-Side Request Forgery CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:43f2bd278e40fa3c1fd3c1909f4e78cc0f4671a2847c484c17d6e90de378aed6_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:a5de39d92e12b408b0cb134131a3c93756041a2495b157dfb81fdacc3ab77aaa_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:b70439065582532b0da758befceb1de6efd0674c119fc771c69efdae8afbe55c_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:e79cc4c2645b8ca3eacc7bfcfa28b9b09ba0a558caedcab7a77d65e38f0e32c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0aa2b028c6d732c37574bb45a1a6e41106cb8b56b3fbf82b29bfe3168701987d_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:b4266e669cfe42ad19852c481abf63c17e5064f458f5d619441c85c55d81dc52_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:bfc2f9c3639b678c50e85a72c30ddbbffb5eae94d64bd55823202c4a00422c97_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e48b0e4c3eb0bcbde4ac7dbde10d2a4394e9cf882c2ff48f7b28dbc20682c8ae_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:2d4f3a992ecc2ad053da5ba7dafd27369f7e23caaa54f9d47fce7bfa897e33a7_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:433473da3d6d8807d6893b7c4a9d3ebaa8295b22eb1a3301571508824ff134ad_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:6497e7b7a378a50b6934c726a11b93671def69f488f22abc01ac15ec8efe5911_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:a809ed9c3e241c17efba317c7a29ead323346ba71235019dd522fc35bf77b224_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:306f6cab5ae223de239ba15b3a0e34e69c4038492cd84392851208c33c74f764_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:c092b07c08fd6ff89aae4bb750de904101a9ea6b8c63ec79d61eef178c872c07_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:ccb60ce37bd109369ac566dd945513be16f27e5e1d487b0c57a00b0a9b97c11d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:f5ec9aceeaa4682f6bdf767f4e1e23e8e957dd0dcca9a5ba96f7fb7ab2be3ed2_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:7dae0bf64a3588de0a0510756e5f9a7781c9ac1ac94351a81dd691a8b52ac2c4_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:86b1e4749c2ce7984655fa88b3e820f59d1691a2ebdfa747853e5c7fa689e921_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:b73428bfac5842a662b71081708228bd0acae2776b8d725242c072750b410f3a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:c6623ed6d0a724acde71da21926b262913d852ac56047a2f802f3b601f0691f5_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:6446a9a64df9fa6add9b7fc53ab5f08b97324ee2a2e39f915c26cc72e28af4b5_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:8bbb73ebdb290c13554fd2a3e1fbbe157e78fe9df0b02cb7daa88fb7e89a5ecf_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:bee53014dac1ea4544ed95a90d733f48f68188c48233569aa0c7ffc2ed157ee0_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:c4cf6b92e77b7d6b6a93b64f87f264b1ce73fac0fe204dbaaf6c8223b9a30a86_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:0e60900fed7eb2a199b339b0895590cd1535247b41703fced1e73822dc2d3c0d_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:146ad47cbdf143262b1b76a6b4330ffc29b4bf642760420e15292f5c15b01b54_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:99a51984f67c213edcf32eade602d8c54041d66db132104139faa14ff18a437f_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:bdd422ba296bbb2e798a809793e2f06933c5cc3a84c9a4a40f3a17f2ea74a4b4_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:0cf932ef1b74b8bba86cfad2b99a59a8a964fbd4c72c1f9c8c1fb83b9b5c0fa3_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:3f2d4bc82096d5d4d5655e9182b65cdfcf2f33d0f22d07e2fa21c6b3a6132421 (For s390x architecture) The image digest is sha256:25df19fb167c97561e114121ff0de951cd92915c0d0e6a52690a24a23f3bcc19 (For ppc64le architecture) The image digest is sha256:4909f684ff0524395ff7a3624e4e75055069c777d7a4249c31bf66ac2d6f873f (For aarch64 architecture) The image digest is sha256:5264a4a46541af0486035968b76d041dc0b86e9269d9c33168ab1bb553a2c870 All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)