This advisory covers security fixes in Red Hat OpenShift Container Platform 4.15.62 for two vulnerabilities: CVE-2025-58183, an unbounded allocation vulnerability in the golang archive/tar package when parsing GNU sparse maps, and CVE-2025-65637, a denial-of-service vulnerability in the github.com/sirupsen/logrus logging package due to large single-line payloads. The update includes RPM packages and container images to address these issues. Red Hat rates the security impact as Moderate and recommends upgrading OpenShift Container Platform 4.15 clusters using the provided instructions and release channels.

The vulnerabilities could lead to resource exhaustion via unbounded memory allocation or denial-of-service conditions in affected OpenShift Container Platform 4.15 deployments. This may affect the stability and availability of the platform but does not indicate remote code execution or data compromise based on the provided information.

A security update is available in Red Hat OpenShift Container Platform 4.15.62 packages and container images. Users should upgrade their OpenShift 4.15 clusters to these updated versions using the OpenShift CLI or web console as per Red Hat's official upgrade documentation. No additional mitigations are specified or required beyond applying the official update.