This advisory covers Red Hat OpenShift Container Platform 4.19.26, which includes security and bug fixes for the platform's container images and RPM packages. A notable vulnerability addressed is CVE-2025-47907, a race condition in the database/sql package where concurrent queries that are cancelled during a Scan method call can produce unexpected and inconsistent results. This vulnerability requires an attacker to initiate and cancel queries concurrently and primarily impacts applications that perform multiple concurrent queries. The advisory also fixes various bugs related to cluster upgrades, network controllers, monitoring, and container image cache sizes. Red Hat classifies the security impact of this update as Important and provides instructions for upgrading clusters to apply the fixes.

The primary impact of CVE-2025-47907 is the potential for inconsistent data to be returned to applications due to a race condition in concurrent query handling. This can lead to unexpected behavior in applications relying on database/sql for query results. The vulnerability does not directly lead to system compromise but may affect data integrity and application stability. Other fixed bugs improve cluster upgrade reliability, network controller startup, monitoring operator stability, and reduce memory consumption during bootstrapping. No known exploits are reported in the wild for these issues.

A fix is available in Red Hat OpenShift Container Platform version 4.19.26. Users should upgrade their clusters to this version following Red Hat's documented upgrade procedures to fully apply the security and bug fixes. The vendor advisory provides detailed instructions and release notes to guide the upgrade process. No additional mitigations are specified beyond applying the update.