Red Hat OpenShift Logging 6.0.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.12

Red Hat OpenShift Logging 6.3.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.

Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.3.2

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.12.79. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2025:12324

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes

Security Fix(es):

* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
* sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.

Red Hat Security Advisory: OpenShift Container Platform 4.12.79 bug fix and security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.16.44. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHSA-2025:10782

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/

Security Fix(es):

* golang.org/x/oauth2/jws: Unexpected memory consumption during token
parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
* sudo: LPE via host option (CVE-2025-32462)
* net/http: Request smuggling due to acceptance of invalid chunked data in
net/http (CVE-2025-22871)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.16 users are advised to upgrade to these
updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.16.44 bug fix and security update

Submariner 0.17.6 enables direct networking between pods and services on different Kubernetes clusters that are on-premises or in the cloud.

This advisory contains bug fixes and enhancements to the Submariner container images.

Security fixes:

* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header
parsing (CVE-2025-30204)

Red Hat Security Advisory: Submariner 0.17.6 bug fixes and container updates

Breaking changes:
* Nothing

Deprecations:
* Nothing

Technology Preview features:

* Cumulative-to-Delta Processor
Enhancements:
* The following Technology Preview features reach General Availability:

  * Kafka Exporter

  * Attributes Processor

  * Resource Processor

  * Prometheus Receiver

* With this update, the OpenTelemetry Collector can read TLS certificates in the `tss2` format according to the TPM Software Stack specification (TSS) 2.0 of the Trusted Platform Module (TPM) 2.0 Library by the Trusted Computing Group (TCG).
* With this update, the Red Hat build of OpenTelemetry Operator automatically upgrades all OpenTelemetryCollector custom resources during its startup. The Operator reconciles all managed instances during its startup. If there is an error, the Operator retries the upgrade at exponential backoff. If an upgrade fails, the Operator will retry the upgrade again when it restarts.
Bug fixes:
* Nothing
Known issues:
  There is currently a known issue with the following exporters:

    * AWS CloudWatch Logs Exporter
    * AWS EMF Exporter
    * AWS X-Ray Exporter

  This known issue affects deployments that use the optional endpoint field of the exporter configuration in the Collector custom resource. Not specifying the protocol, such as https://, as part of the endpoint value results in the unsupported protocol scheme error. Workaround: Include the protocol, such as https://, as part of the endpoint value.

Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.0 release

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.15.52. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2025:8300

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/

Security Fix(es):

* golang.org/x/oauth2/jws: Unexpected memory consumption during token
parsing in golang.org/x/oauth2/jws (CVE-2025-22868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.15.52 bug fix and security update

Multicluster engine for Kubernetes v2.4.9 images

Multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.

You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.

Security fixes

* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)

Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.9 security updates and bug fixes

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an
S3 compatible API.

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.3 Bug Fix Update

Collector with the supported components for a Red Hat build of OpenTelemetry

Security Fix(es):

* go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)

* github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: opentelemetry-collector security update

multicluster engine for Kubernetes v2.5.9 images

multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.

You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. 

After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.

Security fix(es):
* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (JWT) (CVE-2025-30204)

Red Hat Security Advisory: multicluster Engine for Kubernetes 2.5.9 container updates

Red Hat Advanced Cluster Management for Kubernetes 2.12.3 images and bug
fix updates

Red Hat Advanced Cluster Management for Kubernetes provides the
capabilities to address common challenges that administrators and site
reliability engineers face as they work across a range of public and
private cloud environments. Clusters and applications are all visible and
managed from a single console—with security policy built in.

This advisory contains the container images for Red Hat Advanced Cluster
Management for Kubernetes, which fix several bugs. See the following
Release Notes documentation, which will be updated shortly for this
release, for additional details about this release:

https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.12/html/release_notes/

Security fix(es):

* golang.org/x/oauth2: Unexpected memory consumption during token parsing in
golang.org/x/oauth2 (CVE-2025-22868)

* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)

Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.3 container image updates

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.15.49. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2025:3792

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/

Security Fix(es):

* golang.org/x/oauth2/jws: Unexpected memory consumption during token
parsing in golang.org/x/oauth2/jws (CVE-2025-22868)
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header
parsing (CVE-2025-30204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.15.49 bug fix and security update

oauth2

Red Hat multicluster global hub 1.3.3 images

This advisory contains the container images for Red Hat multicluster
global hub. These container images provide enhancements. 

Security fix(es):

* golang.org/x/oauth2: Unexpected memory consumption during token parsing in
golang.org/x/oauth2 (CVE-2025-22868)
* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of
golang.org/x/crypto/ssh (CVE-2025-22869)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat Security Advisory: Red Hat multicluster global hub 1.3.3 bug fixes and container update

The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16, 4.17, and 4.18

Red Hat Security Advisory: RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release

Release of Red Hat OpenShift distributed tracing provides following security improvements, bug fixes, and new features.
Breaking changes:
* Nothing

Deprecations:
* Nothing

Technology Preview features:
* Nothing

Enhancements:
* Nothing

Bug fixes:
* https://access.redhat.com/security/cve/CVE-2025-29786 * https://access.redhat.com/security/cve/CVE-2025-27144 * https://access.redhat.com/security/cve/CVE-2025-30204 * https://access.redhat.com/security/cve/CVE-2025-22868

Known issues:
* Nothing

Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.5.1 release

Red Hat multicluster global hub 1.2.2 images

This advisory contains the container images for multicluster
global hub. These container images provide enhancements.

Security Fix(es) from Bugzilla:

* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)
* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in the
References section.

Search: CVE-2025-22868