RHSA-2025:19314HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.17.43 bug fix and security update

Published
November 5, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2024-48910 →

📋 Description

CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:0e30fd219ce731217faf0e6d44a2a754f15a8fee84d5c0d910ab50198c5185d9_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:3fc4dca6b9580b97b7934ab2584a5ad6d58f51e6eec96b5aa927b1204799f9c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:a092dfa1a6c690fca1a04bdd3a9c9698fb9b23f00e3b373fc2e44555173287c0_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:a3a1ffa8e7328abefd2b8871467c51566bf60251ec813f8b583e63fe10f3741f_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:69013535da7e2b0761aae1a90de0f15af1badf9b29cb9573a9d999198b2d5b2e_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:6d03b29654d6be1d95ca34fdab8adbfa6f879da12f13c1d8cb05d60451a1f460_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:ab729b599c27cc80300cf28471f3f0a794563eb8a1c5ce3c0d3b1bc6e646fbcb_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b34b8e7f8fa60c6d0830107b1e9e6e0943d75ab2673923981ab8c7695407c1bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:075125cb46e78b1c59f0f9c7cee54a8f1a10b7f664442c305311612713036f92_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:08a3f81daf0329e0273c3b36440d3bb99a0baab1a9f02eaa29d0e7e0ea87a049_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:5f19c79b47d3b34b8a29a7350b7548b7add6f9c36cd3e377221bb5f87f85a65f_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:c9c2b9ca70682d2af9109c84a3c7cf7c011ac0d2e6f6fae54ff1ff4187e4fcd2_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:95a89ac42d361279ee6ce5c700aa4fac938af463268dd275045894609e21aac0_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:a4d57e5d9eddf726b3df971d0746b20049fb7f5e609165ad8f38f427148a3e07_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:dcb7750c210f98d47ad74752378a6a17f82a92c27389e4fe2301115d2cc6837e_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:e0a2495f9d2ac96109dba2e79ae85491c6ef624b96276ba19083b4c0a2a72f52_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3929373fcf0c2d0b1f1b5e7f80937ec0da34ad98914439cd76960459bba083f3_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5b99af0b8bf4fd6b0491e1b31588a5e6c6d98d55221e1438a271aabf514d48ef_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:765889fa2cf1cbb582b21000432358478218537304bc634d5322d84ec00ea515_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:8b98bc40dc88673e4d9a87bdbd9dcaf01b93855da94abbef5acf964fb72f1476_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:23b4ec3d6ca8ee7e0f8b08af33066895b89e2337ccdf9cfc499194f047ef7dfd_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:31eb77bfd6ca8d915725d7b239f3373d32d51cc8715717ba7d0ec6ece0445853_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:3d4baee4cd4ccfde8b6573bfbb630fb2df1100280188a99b1a238f0cc6315276_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:44f0cdaa39386aba91e3d910fd47af621b33c24b34c8fe121583e44a507c5de6_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:15215c4c73f45e9e8fe0d42c7b9b116e6bbbcc4c45263b16bb05ad82e88c2eba_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:354c023e6f3476b4fde718dbe392a61b7bba775d78f8fee482db47f9d79c5570_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:9813d45499c1d8fd6d2698042873d37c8fd66dacda228d1c14b003ea18a54222_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:ad0f318770e140e82cb5a30249354461b931d6313e44885648bbd403d808f097_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:0f492f4b7c374376f9d4fa7a394669d6460be19c3a828453b1b0726f3cbb2f69_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:8f7bac89fde3605d5a9deb078b1c72c213d5250ae1a6d32906e529fb99b94cc1 (For s390x architecture) The image digest is sha256:e330780dcc62d489ac534c4f752da3500344aae19c47aece6b9ed2bb07162563 (For ppc64le architecture) The image digest is sha256:78951635172ff7d338b4e3d1ecee0d7751af9588bd90e44d2840dcb64618519d (For aarch64 architecture) The image digest is sha256:04ecf33d27c9e8fbed1054d3370d7f1d853341daf4ad688174ae25f6e257bfb4 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)