RHSA-2026:4498HighCVSS 7.5

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.3

Published
March 12, 2026
Last Modified
September 5, 2026

🔗 CVE IDs covered (3)

CVE-2025-61729 →CVE-2025-68121 →CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

🎯 Affected products35

  • Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:20811926dbe79bda29f859ae53185d9a83abe6eefc4702b05637862d3984b199_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:00bc5e30c3e79c22ef1cbc89dd255daf4ef3db1af8ddd5340a66d573f5bbb896_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:457145374f5e4a5b1ef230d4d2c54aa557dd8dd29f85fd1f5cfc525a16db41a1_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:54293e1848e20c63adfebd35e20fdc81ea4a90784b4bce713d96a0cddc73d4d9_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:57d017684a24ec62d1bab7740c93b72f812b1e075ea2f7bc8dbe991c01688bbb_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a40a1ec9364ba3225bba93e7d85de5dd1df36166f5456c209e60e91392778cb4_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:cab081ede72987f936f132d62410558fdec12acf69610670a50673d70c384845_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:cb98c8af6800e8aa841367ea9d03eb9ad091c9a966c760bf759152750d7979f3_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:d6a0d86ca317f17d18e082eeed1d1460da4334a054c5f468817819591a047d80_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:02a43fca7d2b75ca5f41de71989d654e345f3d8bf74788d959f90a1e1110c5de_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7c576ba00a22a3d24707da423bfd6a0b87e37981fe0eade41e985b48c0072494_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:83923296772437508069d0a630da4610a3c46509121ad19c5633e4f5117ca3f2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9fe4580fa0040d7d6eb9fe86bb462e05873a82322a43a8baab8bbb636a25f039_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3921c41c2aae480e306b497fe981f7965b591958290cc0317420cedec84265d5_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:85de9d5ab08709feab2519e7b798cd6211e80fb602846806ae347ffb2c6ae0c1_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ddce7662254d5d7c673517fabeca19b7f97f9bbfae43cfca39f9a0167ef55d1a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e3ae5934c3f65e12678649549c4d423bcd118eb199048cb955265869a9c4de9c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c37550d02645ed48648714a20796251785535a8c68beca60660585126736229a_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:3163522b27630894a160dfc0c6fe384d4f2135d6b836d70319fda064e92f44a7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:39dd3ea1d69027127d7b81849bd3edc52d9015a7e9db7635f50e77ceb04e13f0_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:97820cced02b56afdfa59a44f8f8624b3efe60f8b2c8cb41d30f3476810894a7_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:fe8d09f37646659fbcb6d40796d744dc480dc842824cdb9ab68ed6e94e83671a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0950a06f3a882e2a851bde4d3495d426ab62aa8023f51571948b5fbc75b88055_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:41158237db552f9e0f09b6aa1b19259f5a7dd8df4e2ab18e72e174c48e40980e_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4c21bec5a0de199d143d2e47cff96a219333d444bdd10632924a3a93fc1481c0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d09b83d61e15085fad33983a2ebe83ab0db7f7a60d5f8a797f21cd05fd2c2570_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:67f9540b475da301e84fca5e7c867f56d8209d0de2496b03f87c1bf2d09e68ce_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6d52900b2b0fece8db5565410e4a54f2b0039a4d23f6136907966f43eea391c7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9d66d268ba5cfe7357b9dade190944583d228677bbdbaf105d1b5e18b4d43278_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes For Red Hat OpenShift Logging 6.4, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (6)