RHSA-2026:2670
RHSA-2026:2670 · Red Hat Security Advisory: OpenShift Container Platform 4.17.49 packages and security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: OpenShift Container Platform 4.17.49 packages and security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
openshift Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift-hyperkube Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift-kube-apiserver Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift-kube-controller-manager Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift-kube-scheduler Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift-kubelet Red Hat:openshift:4.17::el8
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8
openshift Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
openshift-hyperkube Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
openshift-kube-apiserver Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
openshift-kube-controller-manager Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
openshift-kube-scheduler Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
openshift-kubelet Red Hat:openshift:4.17::el9
- Affected ranges
- ECOSYSTEM: < 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Update to 0:4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9
Original sources
- https://access.redhat.com/errata/RHSA-2026:2670
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2670.json
- https://access.redhat.com/security/cve/CVE-2025-65637
- https://www.cve.org/CVERecord?id=CVE-2025-65637
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637
- https://github.com/mjuanxd/logrus-dos-poc
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md
- https://github.com/sirupsen/logrus/issues/1370
- https://github.com/sirupsen/logrus/pull/1376
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391
- https://osv.dev/vulnerability/RHSA-2026:2670