RHSA-2026:26529HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.92 bug fix and security update

Published
June 25, 2026
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-35172 →

📋 Description

CVE-2026-35172 — github.com/distribution/distribution: Distribution: Information disclosure via stale references after content deletion

🎯 Affected products187

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:8a91480a41e313905bcca25378ffead158fcb2042758d0fe56de13cf5da8d24a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:222aa9b858b5918f2897bef834578fa429bcc5ffbded281a1205fe34089628c8_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:900257107af9b5974de3bc47d5360bcf175922005bd21b7535d814edcbdb295e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:61dc27d7203969d1395d7dce857460d93990e10cb7da968e33e4b2a29c2573c4_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:ab6f6d8e37bd08dfc75eb4ea464dc5e618ecf72570ba6df2fc0c36774ba3fb7b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:9184534b5dc7f7214b68e0c54bba11aaa4619d76ef81418358838193ae16667d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:6db4370a013021c0553bf95d1b9479c09b976792bde1e70830fbf05dde2bf797_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:c6683413683f2bf664af1d39bbbef832159279b36a5ca5000be7ab16f3ba4afb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:a2f7279566d677e41d545cfd62d5054b4267491415f2ec8c7c72c4a8420dd55a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:e3030a543747c332b4d895c08737888c260bf3e83cd09de3a9cade9542fb42e0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:2f854816adea3af3b5318545208003e8a26fd791e85058e07fa032cf049a7f15_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:49bce110fe3039662bc60d168fba9cb84128358d37d2a828051a0488a4bffdd2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:bf0a0a25ad411c4f8d10a579467f276072d883c8f338ecbb6104866d1a3e13f6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:cf4e6bf7e16052faf0e2dedb3b8252088253c2fa2fe9831beac8f4ff65f01867_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:1008b8849cfbecd75aaa4a3874588adb659d4bd0a7e168e1b476ab05cff9ce74_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:2bbeaf9ed763ec3cf5e0eec272adb9c2f76249de5d7d9246e3c53030298bb200_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:7a8b116a22fc1ae869fd8f7e0ed3c86eb10335d8ed7e7e409d81f07253f32eca_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:e9297b37c395f5cd7fe0c184fccfda586f8df72753b2597dfcef114f450a75e9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:ddc571b9ef9f5cbe4550e1242674b15ac40e4938741679a2279837f0ea85c126_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:22dde08738147240ec30e481615244e5ce5f2109e22fc2f63d4e06d6fd367885_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:276b8890d0ab255bc89f977ca553a6ab8f6754cf6a754bcd220a76c7c9b4ed21_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:dc8e56492f10d4e81fc8e3df875d203deaba09c27efcedd5bc6e345fdb16fd29_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:3b99d7b34d7750d41097ad110e7d8082bed3bdc843d4891e3d371454bec56d8a_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:0d696ed0b3fe2ec780078e8391cc077eeaa29a4e1911a87b1e4e67e5b35951c2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:59aaab8f21a4eddd28e81782c593ff5edc59b86c297c66e9b404141472b13c68_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:dc6e4c00a7bad9ca1539b024da6a3a019416d409086bf2085dacfe51a51dc7cf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:b87c5e8ae321bd191cfd29324f40bd67f4307622d3425c17f3d5a6359f58a935_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:28c52bb692a91d5c263f418f7d659fac9c67ea2b96cc54dd89b95badbf782c27_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:0208c55dd5ad78a82dc0f268f4009debbc52a802570688928256f2856f1a0b4d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +157 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:4d3bbcec187be94449a001896fcd21e41580dbba1cac38717905a2cb31a94a6e All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.

🔗 References (4)