RHSA-2026:7252MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.65 bug fix and security update

Published
April 16, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2025-65637 →

📋 Description

CVE-2025-65637 — github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload

🎯 Affected products192

  • Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:f66a0e70ff4db8eecd06be7221e1afc18f4cc4b971d73f72a54ccbb91144aeb5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0e8552930ebf6dae03eee2f0c5ed79ba200fed2e41782b10e929b9b58a3c5946_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:3ada000e5fa1f1021e91bb17fe80addb1fe783c8b6efceec5607929cfe02d44a_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8@sha256:99e37eef9ddf27de5f91fb06832a77dd7a752eb8854fb5fe03d0b888d8e4c787_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/network-tools-rhel8@sha256:382f064d9bca1c116e5462ed31d009c3956afdbc600145e48e5050e18e0c7333_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:cc7f9374e6b2155e8f6154fc44b41980715536ec54fe429ec434a3ea519099e3_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:68de08987d985df34dab868cdd41147d3814e4579331ccfb3c0ea3b730eccf56_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8@sha256:3e5610de95b94bbd12e019a3d0dc260bc59c7fd229eeb1e86d830ff6a3ca5caa_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8@sha256:ba7df9cea0a2e5b59171ca9d133c568b621d016b263561664231ae7266b61489_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8@sha256:f356193220c0cac496a3a3c496cbcc712a97167665ff2592aa52a61709010d6c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:10aa55210d4eccaa6369a9ffe48548b9bc3d9bbad5b0c733adb1eec1414e1704_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:947a8b30c79069483951056d8c05ac7938bebdb106448ce9715f4ecfe1347e55_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel8@sha256:41c93b1974e27b361ae9243c6ab6104911d794fccd417b6cec81a4c9290377ce_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:e74694c0c30fb2a0da44d376677204f893d75a2d65c252462e162a3aa3ea6764_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-alibaba-machine-controllers-rhel8@sha256:264f3b3a32c444e30c5c30c1df7e6286be82d6464f52fda953ae89534b052856_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:680ecae2a2ef7c0c80d445f4b35e22d60d6e2c6da7e86fe76a20c468a439447e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:39bc3c72d0a07bac96e2d41ec927ddfaab50e5a29f64a9f56c48680ca809fec8_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:82218662d30e5716e6b0885f96bba658e5f44944cc2367e7f82528568138a473_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:be8c06f56c29b0b478d093a698deb0ee9177be3c3fd8988be81fc8b22001b87d_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:d4a5bfcc63730cadaad1849155dc32d4c8212c9d6f21ae41011506e1b10824e0_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:715e9c721b69d293511451836d7aae6b8841f0783b3779db466691b088ec2ee4_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:cb991575e8aa5424757123e6551add1f1a48dfbedb48fbc528af23b08f8c214c_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:bef500d5b7a55988597abfd509c51edcdf126424ca547a5b688e2577dbce9788_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:7a1f4cbfa65597798a792c875b9a329a7c551d65c1498f2440db8f01865315cb_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:91c544a7403fabb5a5222cb159420ec3ffdc777dc20da8802e16ad645fa873a5_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel8@sha256:ffdc1114835b5aec86414db4d5f399b5fc1c1f2f33ed7e89c4bb82d6c245c499_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:2ec8f52b90544fdc071a69b8fa4613abec74833ed53676ff313bda68d11ad9f3_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:4e596649375db56fc1876617cbc85ed3eb9c87cd27bdc1eebae506b6ab10455e_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • registry.redhat.io/openshift4/ose-baremetal-installer-rhel8@sha256:4e882efe0d786dd2314e119affa1dd2e9c4a27b046ac24e2d0ee648e64826cc1_amd64 as a component of Red Hat OpenShift Container Platform 4.13
  • +162 more not shown

✅ Remediation

For OpenShift Container Platform 4.13 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes You may download the oc tool and use it to inspect release image metadata for x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:8f2d90675314d5860aa070a036e7b2ecc57ed56df6fddb229835cdb674364874 All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor. Workaround: Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.

🔗 References (4)