RHSA-2026:4435HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.19.26 security and extras update

Published
March 18, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url

🎯 Affected products186

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:4347b5d9939eac4f47fbc4b562ad56aeef88a50b7caf06eb50569d49104b7cf5_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:4795c4415a58fe519f08aba917924181deffe77b641869165ddea45ebca938b3_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:5a3c5e7dc0a9594d98224e064888c3d7eafeeb900a4fa563b5f0738e51c550e9_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:d25f7cfb446b46d105778ea94af94802ceda519abdc6a588e964e0108cf3661d_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:0f7f71694c73507f6d43e2696d33bd50fb5d04f27335aa43fd5e06d55712b4f4_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:592a690a3c63525e0764d48b106416d94fd1783902c2fe0987f0d7aea7f3a3be_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:6d2a59000365e64830be7cd37bfc13ac3c65b03eb9e4db91d4355752f26eb56f_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:86c63a77869f6984688619c4add438e4853684a4e6ceb80d69d2cacb59fe9d57_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:4b2e7b96a2239844dca895dfca4e0b0633fe517d344d688afe29a0b62ac08120_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:7b576b641d55dc3e77912543b4c07738fb94ceb6a5f0689680c9dbf94f3ee03d_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:9c432051725c5fe8bae84912f7a9ceed06fceaaa963640974b15cb2a3cba5c32_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:ad466b0e8b472acd752e6eb48f2e5cae33ad8811d322f4b1006a0cdeaa2a4bad_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:1c1c14e68a3b145798c1717cb56f57f9116031dfd3b50f645a4a28c164e133ad_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:5cbf8f502b6efb82dd614e5721c9e1126aec51e54f3b5e7e97b3e9d0a8758838_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:67c756ed6d5135acbc6199e1d408168ff00b1905fb1056dd4e6057d8ad1d6c2c_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:945ce07927b250fc7efa52c970132ea765db3de5a207df046a28cf0314f658c5_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:1de8a0ae2ee3081edc0d141ec7c0fc1264cb27a3d43a58a004f761f9abc9ca8e_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:74a91674ebd538eb2f36f63f56a9840fd324054488fbd11714195fb04fac414c_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:758f0482b775ba43eae0abb441cec73fb3d57ab4cdec8f1fe0eea05704dcc0f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:a85f3b4a0e4a128102a312a536b9774118d6502992462244fbac72e9dbdc5d63_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:68cb523fb4a2a69a17140320d766ea7c629cb119de8479f07dbf00afddec7c60_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:7e22c3e19633f5d1ad9037147535e0d0d15460e06133cc8e6478ad85ee91a9ca_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:9ecfa7f5a64e05dc2c6025a23ad7e773302c1c18e6cbcba3fcdb143f61daf17e_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f55566315749e04331dcf57b1cdcdbef632f2902c66fc9cd95bf6d78909890f5_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:0d604a0c0704990fd20e92532ae32073ddb1e5aa84a0c9e8cfeac963357c5942_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:30564f1bfc34991ef0886ba7ab4fca123c65320f24813b340e7f379e9bc2ef40_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:cef9085dc89290c18cd1ac2df2e0fd60ba76c4ffc6c28a054d60823a32acbdd3_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dcd417b0be6b723418b98d42883b7f3ef7e77bd4b25c758c23cea5a422ac4b61_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:293461fe0c8b8c6562506066f2617292133b2dc40e481856b36e0f18b28cc7ea_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • +156 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)