RHSA-2026:3423MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.64 security and extras update

Published
March 5, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-65637 →

📋 Description

CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products39

  • Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/frr-rhel8@sha256:898e9ca5ae3c5ea5745aaa6c5d4cdd5163dff0afefbc59603fb0ba786688b894_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:6d9652b2131b7e1f9e2b09672d3d2d65892aac6a93a7229e34f844cee6db5ee9_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:6243a19168e4992ba6003225909ba0e70dd7b6fa87f4c0adfd50ec814848b89f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/metallb-rhel8@sha256:9e50d03c3f35d9fe4e5d2ae4f83209c471ce419c3e638a9347280565a91a49a2_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:9f52469c17206f5618cdb12866ede9ed05c67483d809cabb18ce29658c06cb29_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:8942975d6f2c3409c1c48492a3d430d94ed3b2a6c96382c174099cfc125d861e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:03ad66f11814550bf26abf180719a85f061c9309bceea0d22346a13b65bf9909_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:a7ecca6aebbb55bda5a4bcfeffb8a2ef43a4a0790f8016a7a9dc72aa43b37d88_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:a7ecca6aebbb55bda5a4bcfeffb8a2ef43a4a0790f8016a7a9dc72aa43b37d88_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cluster-capacity@sha256:38333d5b85431af1b9c69d6e3e4d9624d15a927d3047a463f47c5a98c4c75f46_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:5f0d663a410bfb4bb7b2b712a570b380a1540e8ef837ad91f0b2debc294922e5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:b1da06ec8b86c2662f25ce350c1699bcfd64660779c3b5012979a11feb192ab0_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:b81141de7e002f52dabf732bf14c8f975274460ed2cae21b0cc58061b1b7ec02_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:e83a6d458e9be7296c680ca9bc84de3a4fd71e2e9dcb05107c728f13afc0fbb1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:cfcb508f953ef1672a84efc72c83a81901c4d266945c3cd16a438ede9ae6a735_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:ab5d0c2559429a860d75068a49a82afd2ef6dffdb125ba73090229ca2b67387c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-egress-router@sha256:aaf5a9c3d70de197698ada01be6e9c468ca70dfea38953d9e2a3358c67d68d51_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:dce850245b3559e285f184fc6f28e3ffcb546b4001b9fd8cc2823df13a2ce3bf_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:964d50f21086672686a636a6033ed41fba8670f4e2d644f217aa0a664b9294b4_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-helm-operator@sha256:4e45a07b146680fd1c37fab6d1629a71ff596626e49e33530efbf57fa6252d0c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:6a092634d46e34e977d1996b406a04113e96151ae748c86d072d99fb908b0479_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-diskmaker-rhel9@sha256:b13c73b6352017ad732185343816796594e4ba7baea63cfe1e845854dc02ba8d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9@sha256:e9ecad103503e4d953a0b809bf1db475535edaf7f48f1309fd7a47f22015d08e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:32c6d7d553aa475ded3b10e4c3a68cac2c75b682956e1fbef910458b22c4bed8_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:899abed53d1e43a21ba7da9a322c171557210e4a5e6063a06d25fcacd6f9e78e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:8c634b4c7d2fe8f22e2c23b421b35b0be55a1813aa0db145318298dc6e082937_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ptp-operator@sha256:5c72d9db36e7596bf2ab5f3d010aca92aa3f7edb999d4dab3b257d5505faa22f_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-ptp@sha256:5cb0c870efaa79739c9b86baaa56d6804efd6e4633cfcf13903cf4e28eebe69e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:25e123536af8513f00dd4793bdfccf843e2100345e0cebc3b6788d2a8fe0c774_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +9 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (4)