RHSA-2026:7052HighCVSS 7.5

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.14

Published
April 8, 2026
Last Modified
August 15, 2026

🔗 CVE IDs covered (3)

CVE-2025-61726 →CVE-2025-61729 →CVE-2025-68121 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

🎯 Affected products35

  • Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:d209573e6df01cd36afacc1a1f8df31e8de3d2a7a8387930f17796ee8b9048c5_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:104e2d1d549a7aadef382b84682101a2aec00220b590c11e33cc32ed42be385c_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:10bdf723d50381fc82aa880eb8a0061f0e2d1e9de79f5434da649150bc069b72_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6c9b684018ffa4f077f1f1771d97b73f26bf9dc85b0b93b75339dc473d8902b6_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b9796103f1764b934f60af071bffc6a8059ab139c1065ec46fc30b2240b651c8_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2c959245c4324af33d6c1e98e353438cb7af01d77820188540aca68d67bb90d9_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2f256cda4ec765512662b2bc61f7d03f55084c1c70931c710856e127f2b3d451_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3059ab6f68534c99df10a0869be8ced3ebfb4bbeb52a4550a6be21d57acea22a_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:350aa685de25030921ef41a547dc8a120f2d62e241d7418ba9c4fdff7d97b906_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:40af6f87f4f2bdc2ef47a4ee0392c0b038282844b98c383969891c771be9d729_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:c15c54a4136fbbbc506bc1419a77a8f25a74d524d1e24d38ab77cc65d5d48709_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:d9849379bef38e9f03dfb1983ca6a5637b77991c358888d4bcb80bd1bc69ea52_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:dc6a419518e739554b189f90f6c92ab31b45d49aa149dfdd1f93ad8ca71dcb32_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:2d890f2514cbe50cf8cbde46cb9efa27916db4ae1159ea28bbe662e26a291b56_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a74624c09a0f8610ae24169b5881b0ed9c58c06cb850fc38129965c5146f06a4_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:b07c633ccb494357b4234e28865f4832411cc124ccb0658673e046e1f00d36f8_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:bf8e677aabcf76a4adfa68838f78c092b53a0e9bda241f2bdf25e8161ba8a9c2_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:066c48e21770af7033f9b9b9ac74f507f638a7c60601221d394b1c36547ed690_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4093857273cd7660e1eb76f608004603224915e9775c803a3c2b251b4cc27a15_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:47e51e1a9d402464b94e64fea7477254618265b6617ab56e47501cb4ab0dc18c_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5ab64d8d0b31ee471952c597995eac81ba1f271d9aace9dc7a56ecea63b8fea7_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:a0e01078c736909918c7da0e838aa09b2a9f730d061473fb8dbf81bd0992fa51_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:187e8269c8e796b8e2d3d7ae783a9f8bca4bdcff86f4bbc8084de94c7cf66bd7_arm64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:83f49174e621dc8f8263d92db55422fb9f79fb2f9e433fc783dbb793e88f7aea_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:c9f16dee85d3b4544380d1cbf1a4e23ad1efa28fda5a42094daa234bd2813a9e_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:cec78cd4eaf7742a71374b3200264df4a1f0e0f89527cd13391be6ff64de6ba2_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:37a17225a4abbbbb8942a4514e92f2855858ddf615133e4965b362acd660bf0f_s390x as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:95616c48fcf2e0918f589c05d0f396d40f0f9e7ee6a713c8ee5bc2305c2d87e2_amd64 as a component of Logging for Red Hat OpenShift 6.0
  • registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:b37d8636f4f30485295080a76e40f3357acf3bfd294b5dd79eedc88356454d52_ppc64le as a component of Logging for Red Hat OpenShift 6.0
  • +5 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes For Red Hat OpenShift Logging 6.0, see the following instructions to apply this update: https://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (6)