RHSA-2026:8431HighCVSS 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.20.19 security and extras update

Published
April 22, 2026
Last Modified
August 11, 2026

🔗 CVE IDs covered (1)

CVE-2025-61726 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url

🎯 Affected products178

  • Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:302895c926a866aca63dc551aad10b8ecc7f39201020d8c1d6ff75b19aac1ab2_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:97e989b141f26d2723472b941a50a63c8a2eba1e8b9d3ed6602111e1b1a4ab94_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:e21fac87bbab35824804d31fad70fe74289241a6e76681063bfa918a6bf997c6_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9-operator@sha256:ef5f60098b7de71781948f49fce50393aadb54a2dc8a7b43b9ad1fb79a790c57_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:2e375faf9e090bb875d8833b3dce200e5fef5c332012d19857da2dd90e291960_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:78ecd8dd5e1cf744dc3efdf7d6988cabd0695ec8ea346cdcb56d70e225beb73a_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:7dafd81d8a99e5e4c2ab82853502debd346fb49a60dfff6330bb051e4fba3393_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:d23af7fbb000885af8025d2550e5dd2de8417afb16a06206598bdea9083097ec_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:2388702bba01da3de98d3b752b9ce7e1ffa7d42d0878b2b4fc84a205f746d950_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:36b95900ff95d28da45e3f10673a75dd9c50c1031a41e017e7fc30af48c952e2_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:a8d63d5c4f30313c7eb95a922b2eac2cc2b2ca2884ee5c2f9f11ca31d38f26a6_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kube-compare-artifacts-rhel9@sha256:e4cbd67817b3721b314634e583c406fbd2015ca1b568bd5cc60069b85d719eed_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:00f62255d53ffe4f09e2bf525e29a5ec83e959a74e393f6bc14c24242ee7bebf_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4223d6f1b722dd254625c0242c568f064dd9f1e2ca63785fa921c2ab9ee870ba_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:5f556e7b063a7be42ee3c38173def5b88012aeaef1f4cb7e26bc6e5eacf91910_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:d4b054a2d2892682a51db16b6090da9ca7555272a87b16071c32ee58cd306487_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:2178c8ca790b9e088c0a694a95cb30a891bac89cb7562c4d7d5f84c936593d5e_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:4351d4f2f30fe5a86ea2a422aae970e209e6818e1f168acd606b0d7542385493_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:66fbe4e2063d9d3df1aff95617cb05216c582fa855a8362dae4758c60b719ebe_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:f042df9864fd236eb29dbdff37b35e2e3ecc343c405e037823621b0e8e530f67_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:1d2998886a5804ffe31a476a4307ef8201302e37f6c8bd30bdca0493b4127526_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:1edc0309a70bc325a07d1d169739c79ed4a36d90c61187fa3b76389575459256_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:406929928211ed617e107f1889b44e31f47e1a28949dabdd02168eddd400ecf7_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/metallb-rhel9@sha256:f5dbbb0b18fcb55cd3f34777313a619db05b7a70bf02d7b2b8eb4bc25b217bde_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:793587eff3ba7c19da4eb0923e27b0cb24b27ab8a878f3a7257982fc89ecf11c_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:79b848d20547593509d757c511cfd6eebd09eb92aea341e53d9385dac8b683b1_amd64 as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:d5028e69c39817aedf7e426e9d54a6440714d3a13a9adfbcc19e31ebfab2eeb1_ppc64le as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:dfe9cb548b3b030777c1315b95124d86f88b586a019440f10cd251a4cc4a6401_s390x as a component of Red Hat OpenShift Container Platform 4.20
  • registry.redhat.io/openshift4/ose-ansible-rhel9-operator@sha256:7b4c9be072a32c312b8f6248068bfe339980707030feaa76ab0ace01268e146d_arm64 as a component of Red Hat OpenShift Container Platform 4.20
  • +148 more not shown

✅ Remediation

See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ Details on how to access this content are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/updating_clusters/index#updating-cluster-cli. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)