RHSA-2026:5878HighCVSS 7.4

Red Hat Security Advisory: OpenShift Container Platform 4.19.27 bug fix and security update

Published
April 1, 2026
Last Modified
August 3, 2026

🔗 CVE IDs covered (1)

CVE-2025-61732 →

📋 Description

CVE-2025-61732 — cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy

🎯 Affected products200

  • Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:1d89a7d6fa0855d29c9203e662e7b1d522dacfaa0d862a3d7ad0d7edfd5b6bfe_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:66cb25c4cbc5f550d79ce44bc31ff8b7feeedc9ed8df95c66549ee3aae9a2416_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:90471120db5916c762c8b7913a7ccd2bcaef3988182fb78cae2ca91097599eab_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9@sha256:9327a62d4a5056e22de9daa9818453c0d4ebce587bd50eb856e011a6ef1fedf1_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:09775a4a1cf7b0207044fa68c3cf9003a5eec96dba3c48a09b31582ec8cbd6e1_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:1c4f8a571e0b9f047da58d375a227dc613d86c4c2e6671553f994f668cb7f55a_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:490188febf683e8b91fdd701472f764528da917ae27d2026c234d74d2baf51b5_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:6555b050fecc12909dfd359853a0e298a9802ef8bd59d98486bbee8a8d17b995_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:17819cabc1133d2df41c0c81c36f168392a2669efc9714d33d547af7d78a3c60_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:531d29b81d17b1f719a2cda6a52dc2da536ce84c2f7d68e07bfb2e43314ddcb4_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:8528df473a4ae8e99a05267e210cc0c87ddcce23c6f299edb49335517e29d755_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9@sha256:b2e552a7583b8dd84e31cce6cd3f52c90c76a59373655003060bb7bfd6303197_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:4de77f53c4f391e4566203395576411238e8780ff7606fc33b8d0f3c5eefd4f1_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:b28ed9fd410390d30198dbde634c9603ab24cf218f5d135338b2bc341e184fbf_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:dcbcee4d00170784fad4a2134b78f6cc45a1ab6fa076efe8206d8764740e2a60_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/azure-service-rhel9-operator@sha256:ea9a3c899a10ce06fb08dd41301ba2a1a9437f633798bd0432aa0e25a7ab5dbc_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:431b1beb5abfbfcfb5e2301db28cc0fd05905dbc0e18972de04ff1b77ed4d8f0_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:6834a6c3b5070c9af5553014a830671d902f4d6697e3de8b4766e67666108705_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:68eb083b68cb25219ee6bcd1cea8bbdac800582e8bb0086d6a7018372e629193_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:ba5ad93ba45eefb5ab34537329b449f2c1d78d2d64ccd39939a79136e9a31eb4_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:77f9cd99c281cd98b2ee30147a81f2554cb6843a7d298a9e4b3c2f458e196a36_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:7e9264f6c834f83dc5b47858e44ec7a4581f263c26b206c7c0f015289110ed67_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:9549fa920e871851c19154d058140f045c732fd89b7f2c781ff3e985befabffd_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9@sha256:b8d81d977e13d308d2c53979ba660336c58531eaa98490787e970bb6b29ea249_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:20bec30fa597c145b17768832af51aae51ef7e59ffbca65c71902d16c1cadb4b_arm64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:39b8c06521aae0299894ccdf8969e0399c1eaf603d64c4570f3022aca7110911_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:af956fb1f0076f25f0ed56f61aaa000101d36e1959285f06cc2460c65c7e79fb_amd64 as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:c28d7275523ea41f21b42f7602cb83bf4d644515f11aa86213bd0e043c262fb3_ppc64le as a component of Red Hat OpenShift Container Platform 4.19
  • registry.redhat.io/openshift4/egress-router-cni-rhel9@sha256:09f120005a6357cae4daa76089c2efed80545b2344e62977c11c79ccde9cc8bc_s390x as a component of Red Hat OpenShift Container Platform 4.19
  • +170 more not shown

✅ Remediation

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:67559510d25d5024c374d67104b99d88f83746f615fa8232ae778d9e7fec14f8 (For s390x architecture) The image digest is sha256:2d527273c5a7077d815a2a67e7970ea3dedfe13bb4f973eaaf75fb8cc2166235 (For ppc64le architecture) The image digest is sha256:d82500c7d65c17524bea939caf23104b28965311110305220943e131d1797b35 (For aarch64 architecture) The image digest is sha256:434c8a014b3a5c1e936a0aab41cf907048fc6eca75e49a4e78c2b931deedb1cf All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.

🔗 References (4)