Latest medium severity vulnerabilities for "red hat openshift container platform"

Red Hat OpenShift Container PlatformOpenshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation

Risk 26

Severity

5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events are not quota-scoped. A non-privileged user who can create pods in a namespace can exploit this to generate a large volume of events that accumulate in etcd, causing API server performance degradation across the cluster.

1 / 2

Source: NVD

First published (updated )

CVE-2026-10533

Red Hat OpenShift Container PlatformOpenshift-controller-manager: openshift container platform: information disclosure via environment variable injection

Risk 16

Severity

4.3

EPSS

0.03%

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A flaw was found in the OpenShift Container Platform build system. A user with the edit ClusterRole can inject arbitrary environment variables, such as LDPRELOAD or httpproxy, into docker-build containers through the buildconfigs/instantiate API. This incomplete fix for a previous vulnerability allows for information disclosure, specifically impacting the confidentiality of build traffic.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-7309

Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.52 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.52 bug fix and security update

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:51723b1449a55cd6489cd60689b42d4c53ceb6956765ff51087fa90f806ac65d (For s390x architecture) The image digest is sha256:e463f5f9a9cb41a172c0fafcd34e48fcfa24f92dc4ddf7b1ab0c8ad909233d0c (For ppc64le architecture) The image digest is sha256:4736dafe11d3ac46f8f6126de474c7030a59e75636d023f20048c6894d783338 (For aarch64 architecture) The image digest is sha256:b78fb9415afb4d73e22c9d8f7ec9de1729023913a11ce4c85bae1e0e71560daf All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2026:5867

Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.18.36 bug fix and security update

Risk 19

Severity

4

Use After Free

Moderate: OpenShift Container Platform 4.18.36 bug fix and security update

Remedy

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:7486ca2ec3bce0ee41dd2c03d75e120b6f660929ea50240463937ae1c4b118f7 (For s390x architecture) The image digest is sha256:907e10c7c312b21ba21efa0bf9610da3d69a97173eefba4510699a86c27b4b1d (For ppc64le architecture) The image digest is sha256:d08e99e6ab216fda7fc09188df598ebedb315b49680d6490e9df0b42ab4d5e0a (For aarch64 architecture) The image digest is sha256:9e1da5b54dab49265e57f7e95a7c912f2ad0d32dc6b013def90cb045fd1510b3 All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2026:5127

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.30 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.30 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:9efd67719b76a75def13a0e08125a361553c8b06691b39bdeff4994c4e907d44 (For s390x architecture) The image digest is sha256:d48074dde460f4e6dd8aa20d3a4bc6afcc3d5e61c2b44bf9b019fc6b2bcb43f7 (For ppc64le architecture) The image digest is sha256:854836a1c1abbc3009190b2c3b26cce91acecf375ea75f4af49faf341514ca72 (For aarch64 architecture) The image digest is sha256:c70fca1f2136dac3a06b6fedaf563ea332f368e27590dad481a82a93a41e01a5 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:7669

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.29 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.29 bug fix and security update

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:df00d64554b9b5d860273f938e0ff3b0c4a7af8356fbd103658ebe6fa2a830c8 (For s390x architecture) The image digest is sha256:9e8682c84e3424e048ed2469279e675debf4b929bfa81c29b702c8513c6c0eee (For ppc64le architecture) The image digest is sha256:4c231311d8d0e4cd794831b96df606b7032943c29e598ec676d4bb41c2432fb3 (For aarch64 architecture) The image digest is sha256:33b7e1a9f973a249de320a42680c0c8de96b77b44360c02e597efeb721153213 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:4723

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.18.13 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.18.13 bug fix and security update

Remedy

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:a93c65b0f9de1d2e29641fbeebc07178733db1cacc7bde178033d7b9183540bc (For s390x architecture) The image digest is sha256:5c30783384a38dfad2a76e238c00a179a96672f55b1b17019a791215e4d56ae4 (For ppc64le architecture) The image digest is sha256:b3795cee96197d59fdde5cd5b974db7f9d5f17518233acc0f0aacc5db519b84f (For aarch64 architecture) The image digest is sha256:2241c79bb208d178f7f66ee37dd2faa011b7154713d2a64aafdadfb391d56cf5 All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli." target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.</a>

First published (updated )

Advisory

RHSA-2025:4712

Red Hat Red Hat OpenShift Container Platform for PowerModerate: OpenShift Container Platform 4.17.22 packages and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.22 packages and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/</a>

First published (updated )

Advisory

RHSA-2025:3061

Red Hat OpenShiftThe Tempo Operator in OpenShift Distributed Tracing creates a ServiceAccount, ClusterRole, and Clust…

Risk 19

Severity

4

The Tempo Operator in OpenShift Distributed Tracing creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This design allows any user with full access to their namespace to retrieve the associated ServiceAccount token and utilize it to make privileged API calls to:

Validate bearer tokens using the TokenReview API.

Check user permissions using the SubjectAccessReview API.

First published (updated )

REDHAT-BUG-2354811

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.18.6 packages and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.18.6 packages and security update

Remedy

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/" target="_blank">https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/</a>

First published (updated )

Advisory

RHSA-2025:3068

Red Hat Red Hat OpenShift Container Platform for PowerModerate: OpenShift Container Platform 4.17.16 security update

Risk 19

Severity

4

Path Traversal

Moderate: OpenShift Container Platform 4.17.16 security update

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a>

First published (updated )

Advisory

RHSA-2025:1122

Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.15 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.15 bug fix and security update

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:68ffa083a5ab473d9fd87cedcb01c6f27740aad92de0ee39a7ac408da9a65857 (For s390x architecture) The image digest is sha256:846ebc62ab2f2f449260b34d16a40f070c43b29a4d79455796e8aa700453dc97 (For ppc64le architecture) The image digest is sha256:1176732e9041adc188c006da5e3bb77cf7b90c5fd85ee6ab0390c91cbf8a7e0c (For aarch64 architecture) The image digest is sha256:1a6db02e197341338e207a850b4a12cf2ab3e1e4fda8ed72b563051e57b4a8fa All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2025:0876

Red Hat Red Hat OpenShift Container Platform for IBM Z and LinuxONEModerate: OpenShift Container Platform 4.15.44 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.15.44 security update

Remedy

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html</a>

First published (updated )

Advisory

RHSA-2025:0648

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.14.44 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.14.44 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:09aa91aa34ff624766cf989c849cd6c0d843f655eb45cb9dbab2f32e30092dca (For s390x architecture) The image digest is sha256:29a98df3cc653059dae27ba0321c9b7ac7d93bfc5666519062d19a9966e304a7 (For ppc64le architecture) The image digest is sha256:b4b2a2df9b048a922f9c835b0bdf58b0b2ede6a8e40df54375e7a91d8eea2295 (For aarch64 architecture) The image digest is sha256:ac92b944142b1bed9deb50ca6310537c391bd3f2bfaeac2a712800f4d654f907 All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2025:0029

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.15.42 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.15.42 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.15 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:8a409d28f876b8c47a5eb6753934b839e23c2926bccc8f2f5a4b292468bb2703 (For s390x architecture) The image digest is sha256:4d84dacc914b602ac1732bed9508a8ab172cfcda5aaa2bd69fa50e3a662f2037 (For ppc64le architecture) The image digest is sha256:ee1aa6234fd330e52956f153f36d4c4240abf9edafe3c9c739ebd332ae660b4c (For aarch64 architecture) The image digest is sha256:e49e2716cc748d81062bf3c9e36321a17f60f1d6bc5c61e99f783b32623f9c63 All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:11562

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.16.26 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.16.26 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags" target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags</a> The sha values for the release are: (For x86_64 architecture) The image digest is sha256:7ecc9d14151c7d16a04aec8103ba6c32fd424898e45b7a09e9bc861ccf895eab (For s390x architecture) The image digest is sha256:1d3e9211862c50a10eca9b4e892b2acceef271c52407e57642378095f9732335 (For ppc64le architecture) The image digest is sha256:af2ec5ac93e6b43b4a85a7c9061b5281da597efca15056cce267883300b66fba (For aarch64 architecture) The image digest is sha256:e2b8441b9931f8fe4964d1759497c3b3af5228120bb54ed3ff82b6a6c9b89143 All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.16/updating/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.16/updating/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:10823

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.7 security and extras update

Risk 19

Severity

4

Input Validation

Moderate: OpenShift Container Platform 4.17.7 security and extras update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:10517

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.16.24 security update

Risk 19

Severity

4

Input Validation

Moderate: OpenShift Container Platform 4.16.24 security update

Remedy

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:6a653700eaae84e648f428c009de6aa6c9a3196600554947886083cf5280ed07 (For s390x architecture) The image digest is sha256:6cd53c234dcd43b43468c6c6d23e17f610fb1833357de642cce3e83bd1cf8950 (For ppc64le architecture) The image digest is sha256:87d401d6c4aea2a914e5c94e84c133b8dc790dab95e775f6a4bab86f9bd26743 (For aarch64 architecture) The image digest is sha256:df25904d8701cc02e69780239ebaabedbf266ce2c96e7f18a8cf74bbb7f18710 All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:10147

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.16.23 bug fix and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.16.23 bug fix and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:be725d2e56befbcb28068207b77d731650ad2c82ae77630f46631af750894347 (For s390x architecture) The image digest is sha256:d931e1c6ada8869765e43480235c9029fdeb32311cc59afbd495a2366ffaf210 (For ppc64le architecture) The image digest is sha256:f69f71b59b5e797872065ea84e9e06f60b4bc64c3e8fff8d2c356e09d4d9297f (For aarch64 architecture) The image digest is sha256:818beb020ebab89caa0a68304ac6a58ed365ad4ff192c130b4cc0695660cddc1 All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:9615

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.5 security update

Risk 19

Severity

4

Integer Overflow

Moderate: OpenShift Container Platform 4.17.5 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:02d489ee6aac3bed3cf6f3db81d72ab0215222a870784f81b6e7942cb4883944 (For s390x architecture) The image digest is sha256:fd416ceca86ec806a90260064f34aa5752c70579ace2a3a4b0facff5d7047b6d (For ppc64le architecture) The image digest is sha256:3225f7cf16b4edb22bd4c779d6577ea0fbd4f0cf592b42337a36e0a6f59ea370 (For aarch64 architecture) The image digest is sha256:6fa4a4cb6b2e4c5f61b15868442e60c3c1cbdd6114b95c10e823de41ac056dbe All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:9610

redhat/cri-oModerate: OpenShift Container Platform 4.16.z security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.16.z security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:8418

redhat/cri-oModerate: OpenShift Container Platform 4.17.3 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.3 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:8437

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.3 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.3 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:2bf757225166a2d1f51370f0bd2ec734bcc8cf759fa1a53ab9531ce8c584c17c (For s390x architecture) The image digest is sha256:24fc0f2cd53a451bce994b5f2ef40e0c2c4d221f201d42cd460881481a10cff5 (For ppc64le architecture) The image digest is sha256:fe485db26a2526e56207ae4e5d499d2b0e77154647aaf8aa180e9ab38ee71b3d (For aarch64 architecture) The image digest is sha256:c0d27b077b91323792e7aedebad96a258c7fcfcb2b3ed965cc9a287f3fdb103a All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:8434

redhat/container-selinuxModerate: OpenShift Container Platform 4.14.39 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.14.39 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:8238

redhat OpenShift Container PlatformGraphql: denial of service (dos) vulnerability via graphql batching

Risk 38

Severity

6.5

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users.

1 / 2

Source: NVD

First published (updated )

CVE-2024-50311

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.16.17 security update

Risk 19

Severity

4

SQL Injection

Moderate: OpenShift Container Platform 4.16.17 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.16/release_notes/ocp-4-16-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are (For x86_64 architecture) The image digest is sha256:a5bfe05de4c9a5cf4a5609105c539e6f8ba92731f068f13bbac94ceb855ce1d7 (For s390x architecture) The image digest is sha256:437aaa6290b7b3b57311ec605308859d3330f09c8604e91d55ea2346b709f8c2 (For ppc64le architecture) The image digest is sha256:0465e61d75adbd1a54cc661d763b25ce805c60609a0ccc86bf5819361feab8ef (For aarch64 architecture) The image digest is sha256:955bc3576eb5902ea912d4577a614ff12a502eb5d1888e431328514fe40ecc83 All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:7944

Red Hat Red Hat OpenShift Container PlatformModerate: OpenShift Container Platform 4.17.1 security and extras update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.1 security and extras update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:7921

redhat/container-selinuxModerate: OpenShift Container Platform 4.17.1 packages and security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.17.1 packages and security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:7925

Red Hat Red Hat OpenShift Container Platform for ARM 64Moderate: OpenShift Container Platform 4.14.38 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.14.38 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html</a> You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at <a href="https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags." target="_blank">https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.</a> The sha values for the release are (For x86_64 architecture) The image digest is sha256:98e43d1e848f0ad303ed4d8d427e92f7aaeaf2f670a3bfcdbeeeaa591b63fefd (For s390x architecture) The image digest is sha256:4bc4c7bf583961d9fd9398833380db628039a0721246b6fef670760ad6e45b2b (For ppc64le architecture) The image digest is sha256:5e3f17f3d36b3e6196175ff4c82c520aad63415bdb5f508fb74f128e5849c9d7 (For aarch64 architecture) The image digest is sha256:234064b828f44eedb05add24accde60cd17ff37eabd89f7834b6b68d425ea9a2 All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html</a>

First published (updated )

Advisory

RHSA-2024:7184

redhat/cri-oModerate: OpenShift Container Platform 4.14.38 security update

Risk 19

Severity

4

Moderate: OpenShift Container Platform 4.14.38 security update

1 / 2

Source: Red Hat

Remedy

For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: <a href="https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html" target="_blank">https://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html</a>

First published (updated )

Advisory

RHSA-2024:7187

Trending

Versions

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Remedy

Company

Resources

Contact