RHSA-2026:3856HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.16 security and extras update

Published
March 11, 2026
Last Modified
August 25, 2026

🔗 CVE IDs covered (1)

CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url

🎯 Affected products178

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2f1c634a1ac6ebc523c3edba80898e3c890a3b5d0307122d578689ab7ec283d7_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:a99f4a36a382b0a4b1c4ffefe845a6dce645fbb9be9c750f5c5ac2776647e166_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d77f88aba687f0a35c2789308db435a60c2ef9c5edbc2214239d351e2adb5547_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ef7647a33820601675bee0ba3d0b8541e6cb9f144b3c1fc59917325ced8fe4da_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:361dd2503480acb374abad5274f1ba13b6fea17b919195cde6b9f3bf304a957f_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:8f0e77bd5ff65e04cc12e34a7a833724029cdc0d1407105f730fd713eca9d06c_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:98454b31a7df58856a3725ed2ee8fbcc88d47de4272a8895a6a1bc8cc4f2ca66_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:bc8e850e96ab8dca814e9d0ea79b005ff0d7d86a00fb998a58034e9368104635_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:60313395ed36b585a05f6779a040d17deb4cdede9df11e09302a5ef4c364105e_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:77335aeba2ffcb7c728f48b6b1919132569df3f7c06a1e13cb1f985332feb34b_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:90f0d5ebe18c4aacb17e025550cc4fff66b4815feba75ed002757dc9d224cf12_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:9644dedee076ad61a1b787c3cd3c480ac81159e6a32ccbdca9516840cc98d2ac_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:50df8f28045ccf06266fd1f93e3ff93eb723465f770c973dd12706c0c0b8fb9d_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:9227e05003307c34af879953ff3887e0fb9b7906ad0a4ba80de7840f08e760ab_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:a0ff3adeda0e383b88921652d0a50cb631043a508c31b582179eb95522abfdda_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:fae29bfeb4a7443283bb45344eec0214b7fb41bcdff4baa9bcd61f60033635b7_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2135ca9735715a9f3847fe6ac3951dc46dad8085a696ea3ce2fd59e3f2faad09_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:27408968b9c4f61fbfa2441b59a0229d334ad2a4125c6f401aba1abca9c063be_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2c628f14d1ea431ba096f86702c1168e7f118a3a17e532220e2531f9e1a47a36_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a344db4641f42ce31b8b6b0667f883109bb48e47e32b62ea8c19c53d1330d278_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:19e445538b5b4845eed9000d0a64d01d451d7d92a3443a31f2592b1179a4c09b_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:24455f323ba8bd086e51a9fc1370cd6728162e7a8bfee870f20d8c1ca5dcf8db_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:963c56c126b7e6025c3d79ed022c7ea431ead85b6331e545e6e3caf5335189c7_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:cbb8bdd66e6d752a9206db35b6b2a72038ea39df4b822b7a9cab28294ba4f75a_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:1f646a93772df27a23fe4c7b5fcf6ee14851d5b5dc9ff4c9aed9c9d3b96792ee_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:7939c7e2960e7edd7abf5d566d1a0fb7f2f8c931e2d8e307544ab4193449c011_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:a0b8afcadb3e874b07465a2a76eeca301d1896e6a3937e74533d7405234a25e1_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:fe19eb031a201f883263e1794e678581060faef7a472b5b98f321f0a8624a8ca_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:38b19d31f0ba32418e1d418d24eec52edf84e0552ba62e1fe881f00f1899a521_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • +148 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)