RHSA-2026:3871MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.86 security and extras update

Published
March 12, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-65637 →

📋 Description

CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products38

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-event-proxy-rhel8@sha256:edbfad083c5ab36e6947d3c6f5618e571bf1f165107b23aa46624b3baad6913f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/frr-rhel8@sha256:10491017efe5164fce5d05c72e9394aa1ed5d91c6a45aa5cd88907083d035f67_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7ef171e460c79b0aa785e75f0e31bda5126d04c8eb3b716cd91a7f95f2d8e9e9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:39c30daa18e2aa4dd60150bc75188e69680f4fbf7627751430cae751069d8924_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/metallb-rhel8@sha256:8128f29358118592943c0946c79049b612358f843bdae7114b8d1b56c637f90c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-ansible-operator@sha256:3d888bf8235e0d1164760f1d8df2d0dac10a6dfbe123a8688f75e10bc66cbae5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:23a96d5500e6156215a685c69aefe2605f63e1995222f7295b5fcffee7f2d3ca_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:16a21bd80c4423ba2a26dd3176946914e130659847ca69dc11676c2a38cd0634_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8@sha256:edbfad083c5ab36e6947d3c6f5618e571bf1f165107b23aa46624b3baad6913f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:edbfad083c5ab36e6947d3c6f5618e571bf1f165107b23aa46624b3baad6913f_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cluster-capacity@sha256:6eb32f20c6dc17aef3b0e7f8b01eb8046a3e34a3713b9ea47daeba82db0d898b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-cluster-nfd-operator@sha256:32a800195dbf4b964d59ab14aa4bbffed062c57a613d8adad99a9e3411092cb1_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:b43913c58b31de305bc67382c48e38219ec83bee7eee05f3632ddff010a2b67c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-clusterresourceoverride-rhel8@sha256:c62e224cdd3e1725e736184fc6d30edb0f7ead4f7c5cc58d86a649d59d6edbcf_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-contour-rhel8@sha256:c9126c57456a198206a78f12ac430d43c9cb917dfe96a21b7c55d19af228dea0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:9c380ce862e020ebaa3c10c53a4a7cf3e5ee9c931f5f90940e6cde2bdbaaa4f9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-dns-proxy@sha256:61002926312410a14942393c1222d559faf8ff33a92458d8e14c6a608a6bb1a3_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-http-proxy@sha256:3e81ce6fef83d6e1f9aa3e5dc05d29d807bc630c6c14146f37377c7227a60d74_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-egress-router@sha256:0fc99eb0e92d6162dd82ff1cd085653065efa782334e9613b73bcb66138ef5cc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:233329f6163cb4b05092d9319a0a8ac2e639ba3df4cab4f95a49c1a10ada3d01_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:81bbc76198fa21933b52ed31791a5487b084ad994301a90adacbb95c290082ac_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-helm-operator@sha256:6e0d7d4e8e5dd2ac705f00cf1317504ff570df371dce5666093f767afdf57440_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:d3d23f03c8d6b6b790bd15a9361cee0fdd20cd8cff25e287d3c33d51f6a8f62c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:46922dadd2c39e96f3d51956e1e34914b5999e76646a585e954cc4ed28701c36_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:b068ec1262b5dd056bc22f20517d99983cd89bb20ac46522d51c90980e6a0921_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-ptp-operator@sha256:9838a3c5d3cc0ca8784e520a7c0612330f43daab875b6f08064044650fa3d72d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-ptp@sha256:374ebf13d917065d88801496f001df0e820808bc31941757db08bc56e126a1a6_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-sriov-cni@sha256:7dc6970b00d26b851a372b7bf45f08226aecdb38ca5f969f51a68c2de32839a7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:d394db9f63df7b3c91176d879ad5c7fd55a5a640c6b6ec1ee61c825a25bd082e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +8 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (4)