RHSA-2025:21331MediumCVSS 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.14.59 bug fix and security update

Published
November 20, 2025
Last Modified
August 1, 2026

🔗 CVE IDs covered (1)

CVE-2025-22871 →

📋 Description

CVE-2025-22871 — net/http: Request smuggling due to acceptance of invalid chunked data in net/http

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:23064881b00bb29d4ade08f87e3d358fe55019c9ce2fdb0b67fe2730b92b1ec3_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:3325fd0a527de44e353cb1f241137d8055bb08c8392645c5642ec02445e7a00e_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:be544d1548e920d4e1a4e9cf5b6143405d044461250f7b1deb5b17800d545f37_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:cf4cc773eab9f6a4c0bcda5d608774ca2825128b2f8fdccc1b75459a2914fd9f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:2630d4d0123f792e9e1f1b36178db005840bd110cb555ceb9424b918b744893b_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5edb81586917e2aca2d45744e81f2c03fa55bb3c65905b09de4edd99dd9268f6_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:86e8dbdfb856db41141b242c5464f9fdc06304a284b14e323210b21a5d4864b6_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:fe1278e4a87ad1c076c7c44dfecb47aede4f34605d616d5665e7693730c172b4_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:06cb9a1d3df9795b48fe2581405afefc7f3a373cfbd72f2d86f5a07388601723_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:08237dea0e1cdc10f6b15edf4b3ef084c91d3ee9ac445268abed28a2207fae0c_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:3da47c923b86ed67c511f8cbfebdddf5e21e0f706386129d1b6dccc19fcdbdc4_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:a96fae11ef2cba62e5d137234bf1eb1fa5921a9892d9861d198fe792313f0208_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:683e80d23c7e23630c73bf408964709e21e95c9b850fd1d15681add1a179b99c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:7ac090d8e15eb6cec1a307ee98911478c9e616dc486304c66ebc0a039bd31678_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:d7e0f51f027f50517d1130d69af6288d481d0350f417f54ee141dd306e9ad3ac_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:f0080496e2a89ce6c959d746a3adecb78ca2f04b4b1e55824134fa3b8441b1a8_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:1f808d6d4a0c6dfd6600c48bc09bfe9cdaab01592dfb68e4ae9a798ae54b9f34_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:4ddab68f69753b17ad488e88824da56365cef8830b3032cc286c9b667eb09e34_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:a34e94ed1983e7d1f06ea2b2e44ca9a7033cfcc8bc5871ce4db9215190bac05e_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:b46f9af818a8359677ff420d8810f97a933732fbe8df697583ec49a4af9736ae_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:001aa12a1285422951cc2e48ff4bc25e058be881c79e5fd2a42134d55ced0e45_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:415690ac56909d4d1072d62ba1e328b49c134c8cab2a367adffe7bfaed1d35a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:c49d9caa464025cd43250cd8e0b2dcbb77db1c0110399eb6f7a207d63b03fc5a_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:dc01a2f846b33bb518e59fa7337d8597d7a5f5d47858e8dd9cc7c94ad81a7e4f_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:0f90972467e75711062ae540365923b4c30bc0aec108faa57e4e382654d8d091_ppc64le as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:22a9dcba76076c04ab940e4106ddcd9b42225381669351084ca72fd58b3895af_s390x as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:7b09cc7018210fdc6a5f0c0b713591bc37530f25c3892be00020a132f0e46140_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:d32337958da36f436f1bb01db6c8f5409a21d38575c33b268fec085023284132_arm64 as a component of Red Hat OpenShift Container Platform 4.14
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:210f43e9cb837de7a24c075bdc2eae0564bedbe28f7cbc37c4c40ffe09241eac_amd64 as a component of Red Hat OpenShift Container Platform 4.14
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:1a02fd2ae00143baf6432510ede55f9add8779973b07c1e5fe6c9036f008f2da (For s390x architecture) The image digest is sha256:384e9567b30f4d74e103f672f3587d17e1b1484dda0d65d6a5092740a5a793a9 (For ppc64le architecture) The image digest is sha256:079c50cdefecb2ee75126dceda39cca953f46c8ecd4fb4c877af7ccbe31c48bb (For aarch64 architecture) The image digest is sha256:9b97c2081fcbca625d6066fbf86e665d1c29ba9be3932d721afb2f2b021daf51 All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)