RHSA-2026:4500HighCVSS 7.5

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.9

Published
March 12, 2026
Last Modified
September 4, 2026

🔗 CVE IDs covered (3)

CVE-2025-61726 →CVE-2025-61729 →CVE-2025-68121 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

🎯 Affected products35

  • Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:a9b04cfa7910cde745e6a05c949d7dc8ea22d17f8d621fd6cd0964ef6d938d03_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:07c060ff3d6723fd580e3836d1d0b42701bbd1efe7ec7f2fe99c507396951e3f_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:3f1d9ce6087ba06be44fca762de06e8f3bd611bd90c579f3d68a3a28688f3717_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:73aee97fe107f2ff5da99dd88f39629722531526d8dc24d8523741f9ee11fae8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9148ac506c6322f06b2ce01aa20f58f3a9e7a66e24ef2a450edd14670f5423f3_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:176faa3ac0d2222bb5ce6a8e8ff0afaa985433bbb126a54864ae59a5fbbba74d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:35af70e15cfdae3a0013fa459b5b77fb83318c5235c80ce992f44725d1c0ae3c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:e99a99d015d5db9a61663303148bea2ffd77c5a0b689e456b288993749aa43b2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f272bb0d9c02709c4fe48e067cd0a60769ed11b77c5e7aa2ebc066fd0112bccd_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:348e40c45bcf4f209fd5bda364916d2dc7269a2724d8bf952fef905d51f21b0a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:395e26999a661ed496ac14dc9464c528b845c58be44d4cf4374cc63fe3380dc3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7188673c4a226ed5dbccff2a0167a5a278c629d1b87ad729ee218848612f1ac6_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:90543cc08bb127a507459b1b0fd916e763625bf4febcf7ee834164ce87a310bd_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0ee822d5316d7bcbabcc4bf9589f9c6af4cd22f7b706489dc1dec53665d25a46_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:26f561d79698d7aec7fd134e3cc20bb791ba1cfc1a0ee572b1b788d211cc25c7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:86e60d5fef0bfe75e890fefa44a021643d5f699c460b396226322af29cc8aa53_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a6b09c2564a460d035173bc7b6a64df9008374dd40f59aeb88a783dc7997e555_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:40a052b2e269f6d221e391b76f3d54e4381eac38f0e15e27fcb0d39e6bee9776_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:33891132762aa99e9bae37b3cdaeb72776f42d18537a4c96ba5b22078dc42d34_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9b3b64c485ae3a2d184fbc962d4f0044fd095a0d8cf12140baa9a98d96e66ab5_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9ef095766611c29df64b711de5b7f8284b9912d74999695d322fcdee4e9680a7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e1fa76d6bae325c87c32f5fd0735fb16ca775c64e771b58d9ac2e31a3d5c3265_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0d494aed16c43ff8befe3ac79fef6bd3f3279c81f50a8722197326d907362d66_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:208f15e6c0d97abdd45bf175b6c8aeb6c77e56cd27c4205691e77f833e0fb871_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4166927ab7ee35b5f32ee3e05236c4c5076c64caa831d9452a71cd4e5bedd11c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:79e5f39dc38a03601dccd5f43e4ef2ca326b81f97f8c0e16f0979b66bdd348be_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:2994fbd027f3980e275ee29735a74d44aecf41f70ce00302d8abc6c2241ffe37_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9e93f36084182e4242096261ba0c0c57be46b37a239a39a49d4c59b642e3e3bf_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b40b5e5e955bd0a461b046f3a161450b7dc84940c466bc2145d54373a59fe3f4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes For Red Hat OpenShift Logging 6.2, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (6)