Red Hat Security Advisory: OpenShift Container Platform 4.18.34 bug fix and security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload
🎯 Affected products200
- Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:9f3af55d9b9d4245ba517f17c4d2c5ed2e1dc892d9c2fcdb4304510fc839d8b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:bb73f38edda4a8fc23e423e640f5723b9ec865bdf712b051a8c8faf75bf083fc_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:db58e54624ffc872b24329c338dce823a0d555a26b26cf4313c806f635f149db_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:f7d8c6318c6f63f6e039328d2b2e8abede939721d4e696d160b4527a2fdbf726_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:0abf05e6bf43d7455346e752ade2490214f6ad8c685cfb302cea74f45a9d9a2f_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:23b96da8a46e47ea3f25ae1d43dc21ace02bbd3f97f10eb013a9ed2a78401af5_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:688622fda716625c189de75bf26eafc3b890f8c89563f3976962a7a714744f73_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:abcb8b25933bf734de10dd0ef29fda32a9588789f88715a80ecb4be2e34fa263_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:53f98eb9d1cd7c09efe3e236b86fe2b20cb6ba20100ff1b5f28d39d4f194646b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:8f64da2d151bd8ee9dc7749335ce2fb4071d66562de92d156a7e803f888b5496_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:a731418bc8da5eeb1dc0b21129120730ebb61cd03685cc041973bf9312ec2373_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:df82eb78a79fd2721f6a4a755232cf9a310b997dc1860892398ade50cf996dcd_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:075726d7b7656fa18576ddc68c59d7f956bf5d6c31c42dd9ae558d7577432a7c_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:3aa7c84e73a2a19cc9baca38b7e86dfcde579aa88221647c332c83f047d5ae6d_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:70feb268f87c00bcf524477e2db0a8587a1e066ca6291b3bff299386b4a8332e_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:b957d4ae98257babb6ce34823171f42e1bd9c323ed5baf9f9108c5cef73d963e_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:31c38cfd614da8b7c35347248690bdb1ac6c1be8f0d1ead952f997316a7daf59_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:b07d6f50040cb46c9823718cfe7676f560d9effda9f22d03864b5b155143d180_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:d300772e4f09368343d79cbca439569c99ea1c65f7308ec7ba80d62a9a9722b8_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:d8ea67ed6f3f094b29ffb5dc5a6d8a6f3ea3deb19dbe37a7cdf6f5e24f3198b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0814c6b8cbdee757cb2f5a8ff16cf1638c5ba330368cd1b31798e74cc79cf209_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5f61f522e7897b87e3953d2f084d2720b0e1b7970e11082206e36c1bf8fdf36d_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:9e995728d7d4ea4fabaf827a7381417b054ac8b4146bcb2c78cbf90d6e70859d_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:e820a1d2f88325ef132f454c72978f476168f5a927673e5ec3b28c2e92174787_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:2b3af40fb1f50de448dc48ca114599b0da3989ffb17c205037ab26ac156f0b81_s390x as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:862bd0e533ad720e891eb5d28b230e57ed2c8713689ef2ee64d73d82ef69d91e_arm64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:a1f2ac2c8b9b285e8034aea8b9e0184cfb6590ddb14ea1a0c2d8ddf2d10226ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:ac6f0695d3386e6d601f4ae507940981352fa3ad884b0fed6fb25698c5e6f916_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- registry.redhat.io/openshift4/frr-rhel9@sha256:5bfe4d3125d98cc501d5a529d3ae2497106a2bbb5a6dd06df7c0e0930d168212_amd64 as a component of Red Hat OpenShift Container Platform 4.18
- +170 more not shown
✅ Remediation
For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:14bd3c04daa885009785d48f4973e2890751a7ec116cc14d17627245cda54d7b (For s390x architecture) The image digest is sha256:8fa62a2f2fe6cf7b21c97b5db889e1320f40924e84be8273b05cb995af18a33a (For ppc64le architecture) The image digest is sha256:64963e6db3fbf634000d05f88d6fcd4a8e2d4a30caa2ce645b976e2bfadf8c1f (For aarch64 architecture) The image digest is sha256:bc4dd607807cf7b1c218b2f81a053e1d13a14ef89c24ef092df455d87deca46c All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.