RHSA-2026:6493MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.87 bug fix and security update

Published
April 9, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-65637 →

📋 Description

CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products191

  • Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:a76dccf4659d7bd7be8e79b96859aaefb390cb2c09b875ed9308d171cd5e1d4e_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:ea176aaa58b2221f5de2779c667e125a7bafe96976af540c484e222c1db57a26_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:1ea2b9a2f4d7b7fc5530f17ee7947890e42b08811bb733433addef5c9f9c18fc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:100db1ced3450b9e0603af9bde5af228221e7ab0c33d8ee03975184e9fd93df2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:5a2cc07e156f82581155fe7848e18ad391971b4dec986613d8a5e3707e4bb078_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:07897e0b6cfc41a45b66cb32ce65f5a12dfca721cb270df5b8621b43211af78d_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:ac377ce071f76a941d48cc4e6c1e4b808242a33939ce2379f98d3f2786e5ac02_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:fa11107a683b5865b60eb6ee2f7775f38435dabea911f29f153ef3e276ff8392_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:817d53180ad42429be7b186b53e170f85761e37290e92c8ace1dc596cd69abd9_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:026a2b8dba8963c1f3fba4390d141f78a4522b4a92e9e3e122616c504c4700dd_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:66de4da18b029c81239b4c96df4921eb02a88b2bc08b9fe7187a811132797d06_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:308d6a269ed740459f7e040f0b0083f0b720291fcc2dd95871bab45ea18230c5_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:ecc9b99e4eccca0bda2fe55df2b236b6ba794eecb494c36efd67d9b821bcaf36_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:ebab0d1ba9cc3070cdf1b4307f8d18b5f2551efb88ca9ad84ea1a303759a2849_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:f55b72e9217fd2f6a24f223ead4a8821ef4b4dbff82d972f9e2fb52eae665a48_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:7dc74bec1511f4eb6dd8c6d2fd0f335673d9ac3fb5c02e1625fc723e325639cb_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:7f20e9fe1854026e79321db57a779049044942e711cb9c8d7c98d77e9c8eb774_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:18c130d72eeb5ae2ce85eda4893c409a1a45b1742f9f15feeafa758c1be9983b_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:06a57351380b93ef9a117e0ffcfda158fd45bd1dc843351815e1e3db241180f7_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:b69db2450640c59703f5e0c5034e918b8dde65a888a541c1841048652568ec3c_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:1463d5e44fdac9403da59ee6e284aa710ecae332dd39fa01a76bd35190be7296_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:87deafddc68ee81d902a3e9daa2d15a23ee7a3c7f681e90af5115f05f01b9f07_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:958adc6d36ab8c6a35b610bc3a644680beb8d871177b5b0c21f88d86b3c640f0_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:ba0f45ed1a9771fcd81f654b37a122390a10d290617c528b9735b072699ffdcc_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:a12f046144082f59a54d0fe55779031598576281508d7815728ab627d7062ad2_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:41020def8f677b07a7fd2ad6578706f780ae5497410ddbff1f1b1d77bb9c3a11_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:804477a6b96e09477c25868f0b4de1fbdb920c2aaecbd151e69e3434ac776764_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:f4b23ec51d26a06ff4924b0ed83a8914372f65ca87f030a24b7e75c2b2ce8b85_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:69222c49cce633746329650212a2145f5637cd4e4e1b17f7c63213e667149d30_amd64 as a component of Red Hat OpenShift Container Platform 4.12
  • +161 more not shown

✅ Remediation

For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:4e989978ab0e24d7148f08e939800502370b761efea1005d87522884d1a3f595 All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (4)