RHSA-2026:13630HighCVSS 7.5
Red Hat Security Advisory: OpenShift Virtualization v4.20 Images
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-47913 — golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
🎯 Affected products43
- Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4f770ffb600aaff68b954e31849634854cf88e39018b277baf1068ad88ce9592_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:a218e541369ad363c6e86610aeca23183202b0848660c8af9729aada4155125e_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b22a4d71e501aa4d703a4cccee322ad9bd54d4602040a7073aef77bfaeaec360_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:436d7cad73f5661c2b9b39e229849f46097e9b09c4d4f8cbe7ab7b22ce999bb7_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:71604850d2cd41db93c0d3d8eed15ad5d586883bd1d58db46bbb1e1739692b92_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:98d088f850bdbf34fe290e61130745006028484b42750e2f270c391f70ed0748_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:58cbd2c422ab7df3b831f730975b6a68165fce450591696470beb582ca1a3e5b_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:af8310a255a5f6522b2d0894e083c515e9ef054352b3865a4d18a0a7b0991c4a_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:b36593c8d713be8ac5fa0d1d3f3f7dc63ba3fef7964e632f2e82bb1c1fa9c5c0_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:5a987ffaa90ad411406126c176bac2b637cd497830a0b6435e7f38d8750f3741_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:cf5c043a65946c20be84bcbca5de75b8ed13dc1b09ce5c3b904c1d3d91177ded_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:d5a4fbbfaec296e82dea233159f65cc45eda5551d6dbb94acf019948c1df061c_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:265434694ecd1aad14247415a4fddcd06d83aa7610a93988cb03d1ca1f93d313_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:99e3afbe451756b589b87f19411bbf2af94472a82a4634df335889813693f01f_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:a1e79718fe80f771368c06a708c9525d2a54d8c34b7efa2160ef5397f16159aa_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:029881b5f87d07cbc3929dde4096cb368b8b3779bf378fedcfb8a5ac1a2cf90c_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:b4b0c1ce4543c4f7eab8f635b51b68e32348bbf641941d041d48f62ba1cabc10_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:fa050da8cd5cf5a3776517d2e5d56198df3489aaf183bf2c8433a4a0faa2a4ff_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6a0b69ef61cc0651a5db276a26a3025c65584ebdc8a719d18400555c4e9d9f6a_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cadfaeb9cd72aec112fe065427e8e1b6eeff2c6210fcf681b0d69aa6d2ea4ec0_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:e3a5b735856b4d5d448c43818ec130949e87283f0f6f1b702be630ad8d26b266_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:39fb5e84c81881d4e5fa8636b110b6d6f9c78601e09209483db3f931f474c36b_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5eb3061bbf4165b8a0fb6545bd9e2faf072cf9a28b1a45a8dee1af02f83d045e_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:aa1cb33f86f8b9c9554cf0aaffc2b2f844b25e76ad8c55b3daa511a58b9a60dd_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9582c0c9bdcce1f161a6f4ae66a0110b0fec5e3d93889883d88583e12b5c8c6e_s390x as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:d26050a317260acb46a9a4cebcc452a27c3890c238519925deac6d0c7aa6cdd9_arm64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f19ceb9d267e2f0ec45dcf4215e3c18373c97950d8c2165b51099cfaaa24dd44_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:29adf32a9fa90675621747e993db21a966333944b6611d687e3913a1863fa741_amd64 as a component of Red Hat Container Native Virtualization 4.2
- registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:b603b10c1f3c18d0a44ddc0a81b81eda6a3431733fe8b7afad5adb412b7ae041_arm64 as a component of Red Hat Container Native Virtualization 4.2
- +13 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.