Red Hat Security Advisory: OpenShift Container Platform 4.21.7 bug fix and security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-25639 — axios: Axios affected by Denial of Service via proto Key in mergeConfig
🎯 Affected products200
- Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:0670c2bb289901d477fbc283a5aea07cd38d7a7e19b16a9ac16f681bc94b2c62_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:81399846b57621b98c097a30f13e778d9842a8dc443ce62a37dad974b1f7f439_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:a4de71b4f22f9f5f46300ff38cfda0e4b5647f286fd5bd365d9e0a6cadd94d5d_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:ac86e849e17e9a83d6683ed0469538f758a53aec6fbe89df675c66ef66f007e6_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:2ecec54cb74d1a34486e71b455886ca4a88ee3b4f3e21fba7d7e3d17b00179fc_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:5c538e8d7cb551cac0459c1971e8bf9800d1db3eaf7e66639ebaeb6c3d9305bb_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:ad92acc19589b0305162857f2a14d8174fc4cb90d5ffc09991f49de756ae61c7_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:edcabf99710bd0952e329b0edab7b7a86b93f9d34dfe17d3391c9405210f63dd_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:48d9d26f06bc34472304b35f6559e428bd1d599267d1298ccf2b199533af4749_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:52e53301f201de393f91cf3084e814e35fe6f93f0432969fd4c511c2ac51b911_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:7ed4a15043060bc2f6ed0ce98efca2721fe19efd8705ecc23ec410de836b6ac6_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b39b3e7a8be95fb0190842c892edaac58878ef2a3c0e59a59365504aef68c101_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:1571d23b7a60a14ca1f6942daa5a4681fec9f1fbdfcece0bc76d552ab96dc45a_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:6427f32947afaea5139673b7561ed3ea36b6d0a9272388146c96636a461d7e4b_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:cf354f87320a3b730ade16800a31fd18edd643aa6b652d0249f6f531db8932ad_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:dd52af230c401d3e17f80ed764ffc2d176c4f1278fd8be791d8098094acbbfa0_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:2131f098ee848c2a4190c1fea7410df1e465efd7bec4e62b36df7cfce07872ac_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:2fb1acc8f1c8f4091671c53c1e2944c91a123a386233ae093def99b6ef6963a2_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:3c497ebfc92e76d91bdb7d81f44d42d245a87c85ca8752f933a89121e372fcf9_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:6032a0dbc7f698d3519118fb73fa99395d08be3c022231a293ba265442c31371_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:47c2783399e696c5e9c87ba45a653580d79f0ff9da2452c6bddc78c504a593be_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:6d6bbab810dd6cf82997f98c6eb27474c2f28ee6139d254e163045ae881ebca3_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:ba9149621bc099a23abdf277f9dd9e1577d3e758fbcfeba8a85b4aba674822c4_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:f607a04fbff99b8e9fe049182f651c9be0492e6534013aff0743dd5a24954051_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:874f7948285d470527af2f674fc82981f2c2b375ab056e06710d4b63f467db08_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c61aadb6f4c72f47bae25eb36b2b392432b9d1c52c25deb6c168689696092d4d_arm64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:d6abeb46b250118c1bc6d79a205fb2a28f1e2c87cc1782856e2b08d57726a242_s390x as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:f4dc5a0f19fd2ce83023001e4b8bd3f06d0f551187a8da64e3882783190a48f4_amd64 as a component of Red Hat OpenShift Container Platform 4.21
- registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:a9600a1e30aff273ea62fac0e0b765c5aa74f41c3a770740fe7a6bd104d845c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.21
- +170 more not shown
✅ Remediation
For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:90792dfb2c5ebb89007c02486efca50556a23650be0915c7546fc507ab05e0df (For s390x architecture) The image digest is sha256:e46ae87b7692e3fae73577f348a927f790d0e3864585a3b9f2f9896d5418ac1a (For ppc64le architecture) The image digest is sha256:69f38d2d2485473e99daa8a5f8cce2ecde6d6d25a7818f0fd358c0a0bdd3e3fe (For aarch64 architecture) The image digest is sha256:0a9a477c1bc0290f71685aa565da3c803898336ce00f8242e5a7207602a7bc4b All OpenShift Container Platform 4.21 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.