RHSA-2026:4511HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.17.51 security and extras update

Published
March 18, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:044282b56f4a65ebdf3e3844c57f18e2bac5b7387b13515fd8a75834ea3fa119_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:116ca0b4be39139d9626b621df4eea045d01acf147079a9cfdee069dcb4d3c43_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:1f44f9f149e6753cd4cf04c87bb6a05e84c81b48e378326fa6d9a4d22b38e3c1_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:8489332153809b9e1e0d05f4848985df70da176d72847805ac20820e5c48fe79_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:08dbc81f704a18713bc0b4536e7ef29da62244a9775a48cfca842d0a1b6413b2_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:770c43b02f1463e82706f607be7282d1b2eaa969e41d855f24317d191b255a8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7f71974d24c3bfa84c6bd34b8951b996be381e694b86e66071ee13beffbabae3_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:e75e4201e165c4203747f1073e10ee19e363c68cd7222b7ed728d2be54247947_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:03f04b64fefaeacc7be11fee6114bfe5752afcd6d097439dd10761cd42bee3b0_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:17475814faaf02a736925be428cbfd7d51477144b7499939ca9069b43813f105_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:9751cd3c62705c0d3f83544e27eab668d24d89ebc150d8b2514142174cc2c3c0_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:be622c9d41e44adef19d02eb49a95d1ba03fb3c175ab6542327beeea813ceeda_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:20095e1c4a072a20984e2d5a4704a1fce38a4460e4298351d443d13a12621d5f_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:30c1b57d9e062b391223d52d027bf78c33dc4b501d9da5d35ec85c523ba711ac_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:cde2f5431620319ad4edfd27807eb8d09e17101c95b11c437d61dec735b75d10_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d93d111e980193bbf8f23b8907ed24c5bd3f018089a0c853a835355e959c9031_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:3d090070b9f0988da288d4cc03bcc21667dab6ce956d56d672958057d9b4258f_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:8d3d49420da626048db329e91840a765e074aab4734da1135fe7caaf9536d98e_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:938c7fdf2206ed4ebc242c55aacdd442c7a0c12bd270b36c398e64f3122ef11e_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:e34ea2084b366e7c3b835162d667cf0525161b9ecf8d4497fc0f9c7a7b0bccc7_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:2dce94493e30b3d5a99c07282f874fc9bef5fa4159b65404e84abeb4d87d7670_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:30d3cde32aa331c3b784d5c4adde5858785f29b1f77f6cfef4937433acb7f4d5_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:459e8af1e166507355fdfdcd94bd61a1c9a31f1fc49d1830e08de1d2b9aa9803_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f93281e0a952814a7d6a7cc18a60953022f69e0633237cb10e35ecb69b48c6a0_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:10baa92853cb1b273c8ffe5a732ab2242f287614f9fe1bd5bb0011eac905e8b7_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:2a003618697eeda1361740a3b65da828970a11332b85c567622cd4dd99f88424_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:778a48afaf3ff432d3d0121b07b23419520374103b271a102e6d94590ad5f667_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:78f9f8ac94c7e5812b4e1acbce479f00a14343f7fc1c06b2cb94ad6cc5865ca4_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:8243f476b1c7b62a5be437744bbf50909970b10836849f27774dc0ac7c7c8a62_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • +162 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)