RHSA-2025:9269MediumCVSS 7.6

Red Hat Security Advisory: OpenShift Container Platform 4.18.18 bug fix and security update

Published
June 26, 2025
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

CVE-2024-45497 →

📋 Description

CVE-2024-45497 — openshift-api: openshift-controller-manager/build: Build Process in OpenShift Allows Overwriting of Node Pull Credentials

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.18
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:061a676cb9a5c7476e41b0eb0f5bffb700ff44c89a5de6bed4ed28109e60dac5_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:5936d036e3fdd1fa515d56c1281a25df4426d3f75ffe3617082fab236c604140_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:da5bc4179940744bf2722cccdf84b363bc26bb3191f2d22773dd2b70b8c7fa86_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/aws-kms-encryption-provider-rhel9@sha256:dbbcca216777f3bc066b31cd83ad57fe77f7277f461f51612fe0d6ceb5ad2095_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:0c56bd9fb07f7e3c74add36ec931d262b0e2d782d7af7e89f643f1d90041ef2d_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:600651b22c25977ef3d60af5a0b05314b7f7bf61afcacf369da85835e2aac595_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:ea2c8bccd2f9dbb4bdaf64f3fd142030350d932bf6ca90da5a8a3d2cb2293b48_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-kms-encryption-provider-rhel9@sha256:fb46028a908513bf18496c4c80de1ca45de0c14cea7fb336f03d5de2f6259b10_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-service-rhel9-operator@sha256:49fb6d27ba02acca487b0fd74253145fb9c2350d9e8ddc57295bc5a57453d2fe_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-service-rhel9-operator@sha256:b0c2dc8850f218951ff3b9c8fc69e072bce3673f6c5d69ba4f8e2755a943d320_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-service-rhel9-operator@sha256:d1f0223fb9413a4eaf88e84623e2872b34375ecc0c9f0bdae34d3883df594367_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/azure-service-rhel9-operator@sha256:e81e59fc1da6f907b7e455d6e6e561ea7291e50eed0000ea48acaff46115100e_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/cloud-network-config-controller-rhel9@sha256:57919fe6828550d5f652a1a0e314362a458919be80d54377e78a1829bfd7040c_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/cloud-network-config-controller-rhel9@sha256:78c9d01ade0068ce7e00feb82b5c132ef5639a2357b46e938c11d0b8a08ae3b2_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/cloud-network-config-controller-rhel9@sha256:7c48c00d399a33ac46a4af5ed7cee90c63d37145b2c1524e271f4eab72329e79_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/cloud-network-config-controller-rhel9@sha256:d9db7b8a82e29ccaef7f5767f3d896d45fca150a6f9bc40d0d21338d3d215dd8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:088beda7383648632b13da058d58d85a4a23fe4fd9b24d8c39ad6e571641f70d_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:13f395e54cc1f0aeb84c999847130bee9ca8359450612d064714c54fc9cbdccc_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:6bb28e283bc382b84dfc08f95e1d1c26cd492cf1e9ec8da143857b2afadcf8fa_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/container-networking-plugins-microshift-rhel9@sha256:f8510b9c145917c40ca954d5925c8a94a59f492ba0fe71ac57902b3ed351a318_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/driver-toolkit-rhel9@sha256:2a8dcac84b00115c246bdc105eb70295c6295f1922dce9dec6e13b710a853f72_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/driver-toolkit-rhel9@sha256:4a52491afabbd33d7e0a07e83373c2a85e5324535215271a0b7949fb16da0c16_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/driver-toolkit-rhel9@sha256:a019fde1c1aff291a34b540f002d35f3e3b38c2aa2cfab50d65bba0d69f91335_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/driver-toolkit-rhel9@sha256:ef125a2b46e713e07e4da9fe0375fd7d45ed7054ff364d364725c4994a280dd4_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/egress-router-cni-rhel9@sha256:1c0863bd34d0c4420b22982c61b9c14b45170782f26083512673df5c1e526d18_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/egress-router-cni-rhel9@sha256:5448591240fb3485da79463334c3d60abc35c1b4984a0d68048a16fcb73f8f0a_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/egress-router-cni-rhel9@sha256:61a8e68ec6b7b6242376c9bc114f428086cdba028de4589cf1f6b980c001e742_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/egress-router-cni-rhel9@sha256:a56286f36f74121612971eb86c3e04c069d5e8061d039d43577945fa15c0beab_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • openshift4/frr-rhel9@sha256:17f9eb0075f702000881a05a3d5735680d0c27a81cd5d03492f9bc030c43bd17_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.18 see the following documentation,which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:eca2e3f7de2bd92b18f69547c8f0ad842fdb83f0821f76b8692f2716a86b0bde (For s390x architecture) The image digest is sha256:97b6e135d882c37e73c93d184131dd13a977483a813343a85d1f6c6d21f0b77a (For ppc64le architecture) The image digest is sha256:445ab3aa3ff4d52e9c032303de8ba4bb15cf5f1c0170fda43de2cd47e54371fc (For aarch64 architecture) The image digest is sha256:ed6ee0258cdb70583fd3705dca8107793ed3c9380554107c99395678952dbd0a All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (26)