RHSA-2025:19306HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.15.59 bug fix and security update

Published
November 6, 2025
Last Modified
August 20, 2026

🔗 CVE IDs covered (3)

CVE-2024-48910 →CVE-2025-22871 →CVE-2024-45337 →

📋 Description

CVE-2024-45337 — golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution CVE-2025-22871 — net/http: Request smuggling due to acceptance of invalid chunked data in net/http

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:719d802cdc007d64eab521dbc648d7efbac8b04713093b774bdce1da422e3ecd_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:ed014578e5710249c89391fdb17423ffa5e6137de2308facd20d4c45981b4adb_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:f42c255c1923e63843b1c7622861a65851aaa086fbb2668e0867e28893ba9c7b_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:f9eb32fe20a46c5b0ccc3e7dd9f7f8d3c591cf64ee7800137ccdf6c4cb1726ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:4a69fac5425de41d1bb0b2ebcbb99012b520002235e578b8a8ff0039079a3972_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5a3757def8e6a4fd616bb999d34903ddc9f7d8aa96dcd865f749dded52e92165_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:63b6550720f82b5a98783901d776f3866075896b661958cff3d8ddff44dec214_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:679852a44689f3a73197e047661821c910e35d50edbd788170b8b0cfd9304166_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:037c72c52db1039c57f1008617136cf9e94c8b3da14ea36c3a0595e6182c0042_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:17a517f94f4fb0429b6284d884570b95349f269ed187dbd94c4476f525dc54f3_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:6e0a2c775267d2f07817788a3ecbdccadbe6377e4d18a0d9dd9c0f0d40c77eaa_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:adf596175de3c3004fce49a68cbe58e7ba15b3b0b315349ddee89d5dca8109f1_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:47c1a53900ad4c677b45d0dabd3f08a2f77f164fed64f53cc5f3d1f53a9fcc2a_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:7cbc7f3c9d0912d4e1d0a1341a3db13fa59bdd0a2e3a81e161e4e23eb43f1278_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:a3c239970ebc8ba8b547dec72f2f6aeddc12cd19c18d75c493abc85285da48fd_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kube-metrics-server-rhel8@sha256:cfbf84917a9cebdd238a83d06f3145716b84b883dc78e81deb3738d2a92a4293_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:2be87034234cd07b0305ba546001dbd90403b8e758c83d557814d9b6ddddacc8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:31b6d68104fe1044f063ba297e9d9e69c1e55b95b26f1e33f93a2573d66814bd_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:3dc697a49932c84227d323499a2a174900bd91215314697b8c9c41f7dca957c9_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:f5f6edef66e7059ef66d2a2bdb52240c48279709048cda1b9b96bb11b9449e63_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:0e018e0ea1a45558fdebe89d04617b2b703ba93c7d58f2b92ceaea07d2498458_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:32a45843d97384b62b8865de40d5c642dfede6904c05d15da08fde3642c6b8af_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:e109e2c17a3686bad9121716df7ffc7d6ec82419f28b24fad531f96f86df0f32_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:f8f64b2c9168897706e6cc3ed967a390abbe83894e7758d08d1b790f451b1268_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:0e033237871e3e7ce2f0c11741dd6ffade3419f95b6b8600f7cb0a024bc89e0d_amd64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:2f4ef4c232f199d5ac24750eca7388b57a44f976a782e48e0dc514c128801d35_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:468133aa3a5695bc314d8f2112e4a62388035c0b272abf4914ddcb485bfce137_s390x as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:601bcab3234fcecec33a89b6e6727bf6d9d3682b0e0a0eb98d6b84cc0db7458d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:00143215db73c4d765605e892829f7c7e4537fefe11251cb3d279afd98d5830b_arm64 as a component of Red Hat OpenShift Container Platform 4.15
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:855c4f8fd6db0a6c7b7ae0f0e02ca5b51720cbac0911725963fa7bc63b943d21 (For s390x architecture) The image digest is sha256:fb218aff20519c10a13f3571cf47aa56ec2363b2dfc06a93e6b8a31f391cd4ac (For ppc64le architecture) The image digest is sha256:8b7fd6407a406163268297557db03eafebd2ad18927dbbaaa82a5ace028a7076 (For aarch64 architecture) The image digest is sha256:be872deb5923ccf88e32c0ec9422982159f53ee4d547b4ea59a165266d4d2ab2 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)