RHSA-2026:3418MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.17.50 bug fix and security update

Published
March 4, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-65637 →

📋 Description

CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1d3817d8a6dea4669961faaac9185ebab2fdd07bd9eab09a38d5443adceac04b_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:7ba516303c49c818c1a8324bed559fbe65440422352a95b4e093805f00af1624_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:bca07d336b86f1477e9014e49940086d278dd7c651204e3b020e811ca4a4935d_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:ffc5336cd1f32a9992f908f037224acaff0ae4c8d8934896e71749ad76013ded_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:59b533779481b6fdae467eb523a5a581ec20be8b413a2c16ea191187b924109c_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:757be5333232ccfdb0645e2430e7aa68c6825634570cef5393149934234dcc54_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:be429349da82aeb7521723ba61c726aafaccd7efddd620bef8ffda6f122970f7_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:e9dbfb764480da30fb861226dbc04704a2c4ff3973646ae5f73484596c1e388f_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:7e3a2341815d0948370c5cd7ec14e905b8f4cdcdc45fd6e23f63a6ee30bbe88a_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:9e0fbc1c2e28820a7ae35c0f10719d1e33e3dcaefa44475f3fc60ba61916df0a_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:9e6910fe5161ab66465e7d42fbb11fffde7c91a28148e69d3f8c7b6f9d3db641_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:d8eb842a3899ee98b8b30113f3ccf99f93d34a0f9781971213825c77d3231132_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:3a75662ee6f5ebfa137b83ac761747eceaf28ddbc6f5ef96f0d88bdc2901841f_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:3f3dccb7f98f951d753c84105f9d0da602806688cc3335965e73217c40b02472_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:803ad42a7fddc517e0f3421b5003f7b754749d331efaf9faba2fb1a50168db7a_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:84798c18d3b3e228bb8aec267eb0a4bc06e44e58c9573cf2f581d1b478873077_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:93752f3a7ad0bfdc637223201c44e904abe21521c45db2bb3dca08ab5b5100e8_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:a8def53038cd045ff9cb3fc2ad5994f2fd7f1d530c9017ae4d7f1c131fdacb08_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:d7a101256b23eb8e7952ef943c63bacc41b099243a1eaa078f3f92b2683ac2f7_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:df45845e9f04757d1f19b3b7505c26ef58c1c0b3e7c9e3fa64c7168432d2bb39_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:274c07d9e670efe09f08f56e851857c63f22de7604a74c3ba07be81a5fb7e724_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:92992e7821ac44c49fed2af614bbf70d4661982dd280e32847201d5f9b5c09c6_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:a11c84d87cf6c76e601bce0d8a23fbea7ac8f4edb9ef958052ae4c322923ec78_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:b35bae1b628f83a16e0577a05fb1ee2d7dc3f2c626150f30dd8579f49edffcd2_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:7b30fe2a8c1069758aefaeabcf415eb1443beb5b61a73b2d138a0f0bbd060a7f_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:b50ecdc47b3a99f946c2f697cf7c9d02eb7e595f745c292d4888983c7fab21e3_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:e8bda32aa88ced61ea125fac7ed30615581c329bd04387b81065892f542d7896_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/frr-rhel9@sha256:f42edf2e374dcfe19ef29bc618578eac93bda99615e9af259a6e5a18c33b5b40_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-metrics-server-rhel9@sha256:15f4676d019b5ba3f26feb4c7e79d93ba051cf8cab5b0f1bd36e0b7e4b5126d8_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:fffcbd70f5251c30d23bdcc87900e3eaf8b3ae4945a29618c26277669b453b1d (For s390x architecture) The image digest is sha256:431a84a0699f3bd4432874d393a87330d962b8b908eaebffc0238f50c66ea05d (For ppc64le architecture) The image digest is sha256:fb50fb7774e135be5db3ae5c3c4333d266f7a7902fb36a1473266de85e0f5738 (For aarch64 architecture) The image digest is sha256:254290f2ca3f3ee45d29d96f9dc60e7b1c2eda513cf4554a559d59c084368d82 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (4)