RHSA-2025:22284HighCVSS 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.13.62 bug fix and security update

Published
December 5, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2024-48910 →

📋 Description

CVE-2024-48910 — dompurify: DOMPurify vulnerable to tampering by prototype pollution

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:299291a1a0bec0167953a1fabd79a217ddecf907f66b8ab46e3854e52d6efac1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:3f730e1b5268f69dd8b104b292993770dca1a1d84f9169e39f027a0255e3d60c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:511d586fbb66ea5ba984c25a0af35314fe5ee1c123806c79f9c1d2518db578df_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:9eef5c9ca70cc2eb7c7e3461a9fd2167a0e46b95fce14cc82ef04fb7b98533ba_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:80203d14308402fe2f9ffaaa62b791cec55cc6abc7344e5ce1e07afa95f3ae51_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:79c4b4dfdfda3267de3073ffd5e9160c67d7fd5c660d5614ed76fea7bc2809a0_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:3cc46974a397fc2d6d0d98e2302d7d9003a2b3c19cd5b5a86b644017277915ea_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:de520312ba78ab416bc3f3c8342401f4feb73c53c640ac7ddfccf59144c6d24e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9edc4a27d6a0a701821c4a9b30265464c62ff51e95252d39a7d199f5625992fb_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:d2447b953f443e7fb068b08daeddebc37a8e0e1e917fe0b4a999a2055d374532_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:49ae725220ede5aadb3601b6d84ebc73b6723766014c4f610e90a2288fb5f727_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:b319d92a83554790823ddb26f2b51c65681363e74d7c6f368867d60cf59ec3c0_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:60f7b2c76298809eb7f482d692ab9db90031368df8a959425280315f2cd906ce_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:3c22c9388f2c0ba5bff71e23eb8e8be26b7311dac1fa81b7cc99368922142e54_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:9d0d2dde3f455b48ab6f24740ce23d1058d3d34f59333b66f5cbdf31391e7d0c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:96f587e0eeac961a642fd484d59a4f03af27bc013c11e9abd6c3a222b1222d3c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:e50bd5f98f8c79e5c02544601d3b0ab56f22d0c00abf6c278dcd89ee6bba582d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:892e8354f5922a94969c0f13ebf51a3bbc564030d83ab6776d6c024cad621da9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:477b8c7b522d1e4ba28d64a0afe5da9f6be399029d23409a568c95ad3607f916_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:002a0ee8652f7df1cf55ae15b4a98897177c0135434a50d8e798800431e1a7da_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:330e4eaa5d43d2d6045eb9afbe8c961cc8c9d5fe3b33f10279a318e70fd831e4_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:bb83fbb13fa300f64b6f515a1eb8c25e53b294345c738e33f964d2c50fcc10c5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:31dcf2ad548350f336be84b7d864317f953b3b314fd8c675958d375e1b8e3dd9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:07180886cc8a255ff8101aa185a7d59a046b6c3c74c1ca3bfb42b51e2feec548_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:277c93832647ddd197f60f23ee96a60085537b656cf3b3df28de85f3ee5e1f6b_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:6ff3e1c0efa28e80a3202a11b22a051135582575d97de233c405d03cf48ad5e9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:748871f4eedc216aca690b26774ec70af808aaa8851534f06a0a2d9a287ece7c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:4af0edf77e71989f3f904702a913ba1895c3748763824652f5c305c63bb819da_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:13d74cd94a56fe10bbdf2ee705fca67e6fda047a5236050151f1da2880429dec_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +162 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:384dcc2b7dde97674e4197b6e4130268adc2b00a94908aa9220a4061aa1030ac All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)