RHSA-2025:1703MediumCVSS 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.17.18 security update

Published
February 26, 2025
Last Modified
October 16, 2026

🔗 CVE IDs covered (1)

CVE-2024-36620 →

📋 Description

CVE-2024-36620 — github.com/moby/moby: NULL Pointer Dereference in Moby

🎯 Affected products103

  • Red Hat OpenShift Container Platform 4.17
  • openshift4/frr-rhel9@sha256:3d489f4eccfdec6da178fc3e7a6ceff432f1972605e996d1e37db83516e726ca_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/frr-rhel9@sha256:894734365764272449f83610f0a596a7133da924558d35eef50553d00799df40_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/frr-rhel9@sha256:becad9f634411183e26e4a72af2d534ff6869afbb12bc4a09e56f2624a8548fc_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/frr-rhel9@sha256:ec44ad50b8ce38ea6760c91f2ec1df353a1b8780bc81bab4748b39fb5a6296cb_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/kubevirt-csi-driver-rhel9@sha256:1176928725d257609b1bf1cad365f4adfac5f2ae9d2ad5a6b1e0448e9148e901_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/kubevirt-csi-driver-rhel9@sha256:3ef6f30bf04cdd2b0c96f4967b6236b6e07b86d0b8aad4f39d44ec76fd919769_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/kubevirt-csi-driver-rhel9@sha256:5d8324b53847a476023c130a268e9ad296379f42ba8479741089b99b4f9b9b57_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/kubevirt-csi-driver-rhel9@sha256:f546a53c7f258564055cdb89d7810b3bd5c9ee4197daedab30f784772b9b631b_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/network-tools-rhel9@sha256:2fe1fed3375388c9fa054d1f071bc70e43026a6b09ed9c6b774587e007504518_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/network-tools-rhel9@sha256:732d87d907ed1086571d5459eb3f7f0582e507f63b7d6283824e1026c07c9d17_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/network-tools-rhel9@sha256:882959690158fff8b660a5112b05b977ed977b9d21ab961556a5961912258a2e_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/network-tools-rhel9@sha256:b3d8d605f29339cf8e2a047338061025da5e36411b408ff7d856fd9ddc6f6d48_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-api-server-rhel9@sha256:00c30558e03540685f8821bad780d46930dbc228f1fee55ee542e1651392b27f_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-api-server-rhel9@sha256:1daf72d95bbdb1f536b4bba509c26fcf84dd17a71eb611134d4a69f06bc83d78_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-api-server-rhel9@sha256:72e60a3018a6da8a62575b1c4d3fd28a2092051a7103217b3f44c3bc15641cbb_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-api-server-rhel9@sha256:93a426797b0cdea5da50a3762e37c0a598944430ffe862dab167486e18d01517_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:1d36308297bea8947d6eb628d8da7ca8c34e1bf1dda989238515d9c499fe1c9d_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:260970148db8715f3d3bc4e5fb08db3d0479565b5b8817e57d05a1160da0f2d3_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:2db8fde63b676a66fe6e551a67cd6e4cc7813dfabd07b1a284c0b86aa4e727c5_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-node-agent-rhel9@sha256:f87d7b245ea698eb6f7cb1bdb7158d009fe7b97f7615e76ef72b79bcc3791140_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-utils-rhel9@sha256:106a15a09675eedeb0f35a2580bb73ec97338aae1cd7a03d70e12d725270ac31_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-utils-rhel9@sha256:2a4f02f8d9fc418bf0d432aa9d8f1976ba1a36b5d26fc4ee481f1a1a8e6b0509_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-utils-rhel9@sha256:5945258725131104226d208a28aafa326fd0eb93d3878b3983f1592c68c65e8b_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-agent-installer-utils-rhel9@sha256:c81d63400370bb32c833b8e0d2be7425e14c61f3b565b7ab50572ae3273c9d82_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-baremetal-installer-rhel9@sha256:08f28f2fb4f961b202ac34c4de11a707a1e67d8874ba3ed09822131457e28224_ppc64le as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-baremetal-installer-rhel9@sha256:4a169896f1cc0f75eba21fe0cb912d77155f1c29b493c02dcf01050b93b846fa_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-baremetal-installer-rhel9@sha256:a15899b9534ef55b9585bd3012320ee0f9d8073e6616e98e5d4157003f5b839b_amd64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-baremetal-installer-rhel9@sha256:bd409d29afd266bba1494309f1675531dd52341c267ed51607435d5d6f99629f_arm64 as a component of Red Hat OpenShift Container Platform 4.17
  • openshift4/ose-cluster-config-api-rhel9@sha256:0769208e5b6c524183ed601e2c3cf932dbc0ada899caa21baf41671c2081d35e_s390x as a component of Red Hat OpenShift Container Platform 4.17
  • +73 more not shown

✅ Remediation

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html You may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows: (For x86_64 architecture) The image digest is sha256:fd8f5562f0403504b35cc62e064b04c34e6baeb48384bddebffc98c3c69a2af3 (For s390x architecture) The image digest is sha256:5ffb0d4986f4bd6ac16a21262742f55b366858d5152bccc2ab128ae59aa8f99b (For ppc64le architecture) The image digest is sha256:cc96f5d549433af43252fb4bacdf5b38dbde635c8674b99c1182a6ade4dcf077 (For aarch64 architecture) The image digest is sha256:baeccc1822bf4dc06376549b57ff516f5426bb6cedcf7a4e4a3078a201628230 All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.htmla Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (16)