RHSA-2026:3906HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.18.35 security and extras update

Published
March 11, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:130a18a433ea9e6d485d93f113463d4912bba178999b4823eb969fb12d0c2df8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:2c4cdd6e4154349d832a6595d5f5aa56ae6c8a56515229dda325996fd625dd04_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:a1c8daa2de0a43ce1c0f9283e9f60b4437cb1d68b97fbcd36231c9fef88bd97a_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:edbddc531aa0fbd93128093d9ecba6006f3b4e879894563adc5e8ef2d44644df_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:13df2fc77efb1d7712c931495f699488502b680ac27c06af309f1986e43ecd11_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:57e42675a2d46e5332ba57bb0881fb7f97f9158c704ddd7aa97412d9e155a388_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:841afa9da4c8f4bc21ad567d0f5e63752a311bdcdafd244c8b014c69b84042bc_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:f6c11805d7e9b38afb39b155e571c5345231d7c54b7d16031fec8c6e972cf82b_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:3c53a1f05b3960adccb0a10b27a8a9f2f7620f5d3b907387712ae74038285fe0_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:670c2491990d28e5cfd439c5d7d1b4e37842c4951eb6bf62d3e74bd0222bc873_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:bc97cdf56b02f47a01011cd521fedf6eba04957a3350a13be00ee776e8998ad5_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:daf16cace614f60c9342eb2bd50c4d59e8aeff174aaa819a1f8860743fd8fe02_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:a6ab1f1ac57ff5df383921b6c10e6616ba40c48af1683c7854745159d466b270_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:ad90df87b002cdfafd40a96aafcbdf05f81c0c64e4aef7c1ca589608191f33a8_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:c8e62e31c0446c6af8fd409201e49312f904aa93c9f43dd03cdcfa2a8b7512b2_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:e4b2dec4a80b8f42f73ac3a36893fdd5fe85dc6d678325ca6f600e672aeba348_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:0cbb40d7bdc8eba7113790e7b6bb345b7e19abd1a2fce242ff45bb3fa5846a50_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6736425137855f482781b5be8b61bc0b09a4865c17ab634b4c5c25fbfa5d8c11_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a09cab94025a3e6e57ebe9a7bdd96c86c7eccdb799d143f4e131a26a383d1ee9_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:ec604b5b9e10cb631fbea32106db70ba04e58701e5c9127d38603e9f3577edbc_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:1214f423c6d45192d82dc2c0bd0d8468a379ef8a954ee64e1c20bd9463389c61_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:29042a588440a67e576c20219decf513bab67da384cf03ac345a74720ebce4c9_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:6d9dd0df0dcc592d8fbd93a79f77ca90d84979c2ac7410d7e9d452e1cbbe075e_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:e35bc671a0c9153394456b57ec33a6b539a8018a4cc7a8d80171dc77512f8f94_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0091133c8d769b684b92d01f736877a425cb62f2009856552a22e54a01023862_s390x as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:58f568df5d122f0c32737c628444b60969be047cd1ba27d4e4d060c46d477412_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:87f78791e5c076f183d1be00ec3c70261f075ae9bf662e6e1a1be564cbddc071_ppc64le as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:8fa9b602dd954978c89ddf22510b02938f94b34681125f4f2d9dd922be81676f_arm64 as a component of Red Hat OpenShift Container Platform 4.18
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:79506e34cde341f0c3ea530a5201767c967c35df0731adb5b32420f0b592a08c_amd64 as a component of Red Hat OpenShift Container Platform 4.18
  • +162 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)