What is RHSA-2026:5142?

RHSA-2026:5142 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenShift Container Platform 4.20.17 bug fix and security update

Which CVE IDs does RHSA-2026:5142 cover?

RHSA-2026:5142 covers the following CVE IDs: CVE-2026-25639. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:5142?

RHSA-2026:5142 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:5142?

RHSA-2026:5142 affects 165 products, including: Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:01fe42bef62e141999ec7b9a9863393a676ea4abafdd00d12a09df44c4eca8fd_amd64 as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:18e39b1bb67719078fa3ec73db9bc28ebb70f675ecbda63a5b2beed58e833906_ppc64le as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:a3705e55c87d86e4c751cac5d17d63d5eb85fa4478d969dafe384c0cbcb5cfb4_s390x as a component of Red Hat OpenShift Container Platform 4.2; registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c667f68f7b59b61cd2b185393c670cb35b9c5f56cb8d417b9cb51d95ee0272b4_arm64 as a component of Red Hat OpenShift Container Platform 4.2; and others — see the full list on the advisory page.

RHSA-2026:5142HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.17 bug fix and security update

Vendor

Red Hat Product Security

Published

March 25, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-25639 →

📋 Description

CVE-2026-25639 — axios: Axios affected by Denial of Service via proto Key in mergeConfig

🎯 Affected products165

Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:01fe42bef62e141999ec7b9a9863393a676ea4abafdd00d12a09df44c4eca8fd_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:18e39b1bb67719078fa3ec73db9bc28ebb70f675ecbda63a5b2beed58e833906_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:a3705e55c87d86e4c751cac5d17d63d5eb85fa4478d969dafe384c0cbcb5cfb4_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c667f68f7b59b61cd2b185393c670cb35b9c5f56cb8d417b9cb51d95ee0272b4_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:11f24e17e3fd1bcb25241c47d76bd3800593e9f4a493e7e545cbedcd1926da2d_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:2f6107770f1fb82e40997b8c8f1dae0408f1317422386b8ad4ebc6c79efbe797_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:4b6872dc40d53d4657492e3e25592e98f7300cc543dc16a6d58ae78b74781416_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/kubevirt-csi-driver-rhel9@sha256:e162628148310e6bf86cdafe3d0d0ce36c7842a9a6567381b9d90acde4ae0544_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/network-tools-rhel9@sha256:843593a17636af6b6dae5f0e172ee2590414d093b3c53a5e8ef65de050890424_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/network-tools-rhel9@sha256:bdfe3cf241ac03b5c4003a9f9ee3e6369e4ecc298b9c6c9a7c24c9d938b06b1f_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/network-tools-rhel9@sha256:f1daae683b8df5ea0e559e3acfdd53491bcf4fd589a129c70b77e6621480003e_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/network-tools-rhel9@sha256:f39bd18cd41526b1a7c11316b587246675331c87aae0307e43b6eb87a6674bb2_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:1e6aa292e001c7241399cbf5ca290e8fd58be92f58b0f5d194ea4d5fd38db82c_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:29191caf2f01529eaac34d2f958b07c3998549def5918a38b5a4622c006e8fb4_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:43bfff1dba401620d69e3e8c2ebbd661ccaef081b01a440d820027560d1ab148_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/oc-mirror-plugin-rhel9@sha256:a7cb08bfe6a43532c63adc5814799d5f05d9c70459522da53b86c625120ba27b_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:69b04e6d42b12ede1cdfdeebef7d8a76fe5eda20f29c5e99f26cb1e0bc98cf8e_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:6cd0a2b56a3dcb79dc0e77d21460e502080936cd9bb72ffc0b9217834b2f2508_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:ada91f9ca5511960bf9186bbdf489e8702f5cd6b8dd3de904e99e4cd0cd27d02_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9@sha256:f3348d2d5a03fcea547d437cdee0a412ae05e92d91c73fd864f06df6d0cf6e7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:4af787e869ad4a769be66c220cfd4fe65da3addeec80a827c0fc3530465dec2e_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9@sha256:7ee4146f484104010f00c32163b617db387b277ce9f38ab0e1e474cbbb310638_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:358352e377bb3428a676e37d75c8194c5b321f871cb60612208baf074d5dd660_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:534b97046a6f7b420a88295ce95651c3dbdf6024ef13c6941ffc83f4880ae5f1_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:6e31b25a4ecbbf3b675741fab14b822a864fd52b95b889c3ce7f8fdfae57121c_arm64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-installer-rhel9@sha256:bb8837b1089c78b2e0be230a4cfeebebcc32389f29dd1fbe658eb4ed79dbe328_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:337f01cb3cd356b2f89a0bb2b22b046ba8fb471f360eced07e5354c77cd5daff_amd64 as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:6722e6c8692d3258b5bd1b9b1efb8e02928125d18d73d11259ee8f7f4f6f164f_s390x as a component of Red Hat OpenShift Container Platform 4.2
registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:8b78938f11f25edec777f3f26c6aea87503df3bc0de9d55860d7b854a0b4be9e_ppc64le as a component of Red Hat OpenShift Container Platform 4.2
+135 more not shown

✅ Remediation

For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:e0e62ca0bf43f7e9c18551fb8907c882c60cfa0c76392d3a8115a628da02d693 (For s390x architecture) The image digest is sha256:d468783ef1d0d6ca66d14856d0ea8615deba9c87b6e8638996fe31170c3b93da (For ppc64le architecture) The image digest is sha256:cec4ff75a5cd9304b5ba95abd858cd9483934c55d1d2ea34623d1685ad9795e2 (For aarch64 architecture) The image digest is sha256:4a3cdf5cb6ea8ab473307a61ad8599b92f710f142da2a60ff5c26d3571d85a25 All OpenShift Container Platform 4.20 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products165

✅ Remediation

🔗 References (4)