RHSA-2025:19895HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.12.82 bug fix and security update

Published
November 13, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2024-48910 →

📋 Description

CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products191

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:2b6eba498f408c8e4074b55da0c42ecbcc0704fcf21656efcd5daf51d623e893_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:fa5fbe69d9a4705c2c9f8d77c35905643098e3822129126c10783b533b0bb548_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:c5a87bc54c341d5e406c6b23ba3b8c4bd55453f6341eb0bd771b2b5a7c3a912c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:93dc204ac7160bbb63011b96d1f34afed0df9ab68b32dd4caaa82692540dee75_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:5554c6b7339d1fa8a318c4d5da168e34d792908c8a7f6b26b34a52d3a1c25bc2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:62cae93467616a4536698c6cec2e4c442b324392d92a9fd11af39d62f33cf2fa_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:7103bd3cd9275216ec61b4f7ccd5e190baf4a582758eb56263d825b3220b4fe4_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:9dee1061632dda37ba21e74cdd68df8431985c90da90b4aff99db248234a8b84_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:641928049a639057e544276feaa7fd1777abe9e8bdf11ff922b257f3f5a5a31e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:54d6254fa3708c968a6b866612f7fe54bf09d21a0a3cc156a81eb728527cf8f5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:1716c056996f69a5322e434e26c7b7d22e9c27590b473a8e86eaacd7e748c6f4_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:820a04c3c36d683e0d5ef275277fd8bc311862bd5fdf49566802148648014f46_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:74c0ff06abe96d5a773d0447267c44a0b7641ee44b4995ee75249a6708cc8dba_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:4d040de80caa7da1da5ca25e786928ffa0998f74cba0cedba3ed49bf80d72d35_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:578bbebdf8f48d495724a28dc8a41e8fbe6b88ae25827077a9f95e84664ec236_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:dbe841d02599e71f78e913abbdb64148525a197198baa0798f72f6b96efd8bb2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:55385b70629c5b97295673256542ecefa23b34c79d3d3422c9accac435a0da7f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:8173f965337e14f1ea8828d6ad81af03126b81be85a664003ab81801f8a94ac2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:a1b863cdad9e44772b0c21306d91b57cdf6ec1cc8952b8e11b69d3221e1ab58c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:27ab6c1ccbc7a1ae65394feade8511610c4a9e9918e1f278e98e638f82040209_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:043e5493c0dfc7fed99cdd3c11bdb736349c9a333164d3570f857c8fb1a9e977_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:c6be492a1d73990fbcb88440ae2b66ae7038e22a62f758913d5a42392b3f4c8c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:0d04b251b63c23ad9d2c8dd001721246c3cb7dc6448e89e86c9323763508035a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:22b10bb949a7fbaf9e8eea0c26caaa06ffcdce9fda383301d5ad2ad034ae3dc7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:53cbcee15c04abb83274b7267592d71bc160cfa412635fffca79d7054354a5af_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:fdf811fb40083d8044985ee3787a927f8b3a21b491992b01e41e23bf3e09d5f1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:6d753e52ca8e24db97c5aef550f08c5e879fca642c785216dcd7229512e4e638_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:713bb0386dc4728f9c62827bde3cf2d13b3ac24ce3d856cae50eee8d88ea0c1c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:951c8f1172467bc85fc8f51c0e0fa7049e45dd61fe7a2f101f3694fdbfb544a6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +161 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:d26fd3fd30ac6ae13f2779045d4e2defbf77aa24db5393d91df19488fd42504d All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)