Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.15.62. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHSA-2026:4423

Security Fix(es):

* golang: archive/tar: Unbounded allocation when parsing GNU sparse map
(CVE-2025-58183)
* github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service
due to large single-line payload (CVE-2025-65637)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

All OpenShift Container Platform 4.15 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.13.68 packages and security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.18.42. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHSA-2026:17448

Security Fix(es):

* golang: net/url: Memory exhaustion in query parameter parsing in net/url
(CVE-2025-61726)
* crypto/x509: golang: Denial of Service due to excessive resource
consumption via crafted certificate (CVE-2025-61729)
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed
RELATIVE-OID (CVE-2026-23490)
* golang: archive/tar: Unbounded allocation when parsing GNU sparse map
(CVE-2025-58183)
* golang: archive/zip: Excessive CPU consumption when building archive
index in archive/zip (CVE-2025-61728)
* crypto/tls: crypto/tls: Incorrect certificate validation during TLS
session resumption (CVE-2025-68121)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.18.42 packages and security update

Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update

FIXED BUGS:
==========
DFBUGS-6345: RHODF 4.19.15
DFBUGS-5942: Backport to odf-4.19.z [External Mode]: noobaa-default-backing-store is in creating state due to "CheckExternalConnection Status=UNKNOWN_FAILURE Error=SELF_SIGNED_CERT_IN_CHAIN"
DFBUGS-5819: [Backport to odf-4.19.z] [IBM_Support][Fusion HCI]"storageclient-xxxxx-status-reporter job" doesn't inherits the tolerations defined in "ocs-client-operator-controller-manager" deployment
DFBUGS-5800: [Backport to odf-4.19.z] must-gather causes default RGW pools to be created and PGs to be stuck at 1 
DFBUGS-4440: [4.19][ROSA HCP][UI]Bad gateway on Storage System creation wizard

CVEs:
==========
CVE-2026-34986
CVE-2025-61726
CVE-2026-33186
CVE-2025-61729
CVE-2026-4800
CVE-2025-58183
CVE-2026-33036

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.20.18. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2026:6559

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/

Red Hat Security Advisory: OpenShift Container Platform 4.20.18 bug fix and security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.19.27. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHSA-2026:5878

Security Fix(es):

* golang: archive/tar: Unbounded allocation when parsing GNU sparse map
(CVE-2025-58183)
* crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.19.27 packages and security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.17.52. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2026:5907

Security Fix(es):

* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)
* crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.17.52 packages and security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

* github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload (CVE-2025-65637)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: container-tools:rhel8 security update

Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.

The Red Hat OpenStack Platform (RHOSP) director Operator adds the ability to install and run a RHOSP cloud within OpenShift Container Platform (OCP).

Security Fixes:
 * Unexpected session resumption in crypto/tls (CVE-2025-68121)
 * Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
 * Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)
 * Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. 

Security Fix(es):

* golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat Security Advisory: skopeo security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.16.58. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHSA-2026:4482

Security Fix(es):

* crypto/x509: golang: Denial of Service due to excessive resource
consumption via crafted certificate (CVE-2025-61729)
* golang: archive/tar: Unbounded allocation when parsing GNU sparse map
(CVE-2025-58183)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

All OpenShift Container Platform 4.16 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.16.58 packages and security update

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution
for deploying and managing virtualized and containerized applications in a
scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP)
control plane.

Security Fix(es):

* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)

* archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Red Hat Security Advisory: Release of containers for RHOSO 18.0.17 security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.18.35. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2026:3905

Security Fix(es):

* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Security Advisory: OpenShift Container Platform 4.18.35 packages and security update

Red Hat OpenShift Service Mesh 3.1.5, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
    
Fixes/Improvements:

* Updated to Istio version 1.26.8

* OCSP Memory Leak Check BSSL-Compatability

Security Fix(es):

* istio-rhel9-operator: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

* istio-pilot-rhel9: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

* istio-cni-rhel9: Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)

* istio-cni-rhel9: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.5

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

Search: CVE-2025-58183