RHSA-2026:13450HighCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.19 Images

Published
May 4, 2026
Last Modified
August 11, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2025-47913 — golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

🎯 Affected products40

  • Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4874436a3b58c337ec2125ed8d6cca24098763d41709e804ab2bc16f6284f75f_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:88d505c2c81da0c00916cf751bbe2ad4e9e551f17a4a3300bde1c4fd42a00385_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c69ec502601a617c73b09ced6b3f35c1043394441f6d2eaf9782a25a9868dbd8_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0b3491873a663040e59cc06f0da29493ce159a00426bfcca0782edbd20713c82_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:1043abeb76d3245e9f1fc8856d784cba4f28dc0b19f11c43ddf1d9e60ebd8c0c_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:fbb023d5df067dbe85e52f7b32859392db47429cd1ec778be18a8e992b9db0d2_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:4a99de349c56dfcecd053cf23d8e468fe0b392050312fc8608bf416add88e9da_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:e031c572b5e7ee8a7ccfb7556da7b22d19cd86fe55efb4b42014587c9947a56d_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:faf48368595ec24f7254c63ba1cafa706e02f7405156e7cfeb70c081ff7f5b3d_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:1cc13e7c826632f27497c045a62cc3631da62b8db6f587fb8f6f32a481bd8ea5_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:4a0b89da325e0a169ae168c5ded8aef3f26f315b369acf53f6f1193be3637d8d_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:54b9154093d57c55955248d44aebd83b8c53dcb3979f376f951de8839dbcdc17_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:0b6a9082c8cb4be622389025e9601f8a48b220df2568adf200e08a6b2a982a6a_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:36a071d79ac8020d825bdf3fc850d84fd89f182dcd83969c1202b67f519bdd44_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:71bf5638000451c225ea384499a2fe37765beaad2cdc87dd3d73a0b9f7c44dd3_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:29a189d07e39a657e9fca53bc37fb0a1c51947c4c1e46dc2ab396e9bc75c1933_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:29e3fadbd1a6de72c5057f3689c576ab9edd61b6f4ba4742afc18a452431f086_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:2e8750753152f84fded5b2dab11ddf82dc07c5a4c97641779e090698299ba38c_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:8d72ecfc6c4888f7c7f2d8cdee47b8d653636a169b863dcbdcb544ccd57f4da6_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:94e63405f0a7453e3cf048c53737854715caa36a5ac0e4df56f9a2f4ac84f82e_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:d2461f7687cb14259a05c69b0ddebd8807b11f31edd282bd315ad35f3a77e940_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:6c24c11b2e11a96add54c80b270da6c707d17a72c08f30929a4b06a34b0b1ca0_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:dd84f23d27b65d4dbf940df173426914263ce33e500ab7d1bfd954d32dacaed0_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:f80d48a56e8ab407af836a479cc312275ec28d4dcea0d9a582b10479c80b82a1_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:0dac01ede6caebb44cdf779d89a41b55a729a451bc0ceaec2edab38d5108c9bb_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:1c75d95a2823fbe1d375c94d747834c6649859f4addff478f17313760a34cff2_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:82c5f8c3018441c719b4bcafb7df0dc78c30ffa5a835193b765090c59794973a_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:159396fb6f95355ec72fe9413b5620a93e2cbcf3067edd009c7bbe12816e914c_amd64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:72501e593c83fbb1265acac3296f3deddd66b405e69684b2b0abd2d9b28ca831_s390x as a component of Red Hat Container Native Virtualization 4.19
  • +10 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.

🔗 References (4)