RHSA-2025:4730HighCVSS 7.3

Red Hat Security Advisory: OpenShift Container Platform 4.16.40 security and extras update

Published
May 15, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (1)

CVE-2025-27516 →

📋 Description

CVE-2025-27516 — jinja2: Jinja sandbox breakout through attr filter selecting format method

🎯 Affected products48

  • Red Hat OpenShift Container Platform 4.16
  • openshift4/frr-rhel9@sha256:221d7e87e4b76151dbd3da24df7265acdd410cfdbf74b034429846915444bd4b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/frr-rhel9@sha256:4c05d62772fb177dc1f5198c2712bf5c3dd970e9580977313ffbc4af88cfa069_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/frr-rhel9@sha256:8b6562ee27b7042884bcf14c4d48fb736c2d0be7b84b2a066b07de718cde4911_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/frr-rhel9@sha256:96c5cee0870bc9204c73661d8b5adcec1e8f3a0db95fc696d12f55e3e330bcf2_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:22437c84d6a182a67ab9ca3861eb02ad866c0305bc3a955f73496948b6f37a9d_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:2a78648440ab1dd87edaa916f08fb6a6cbbe8d625f8cb39ab0ccbb0c1d4caabb_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:2f7d180614326176407f18e7a70ca7ef3d9df68d9e48ca498176985e4c9f0c0d_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/kubernetes-nmstate-rhel9-operator@sha256:6c06f91e2083231b9a346dc1f0d729e80331392ee4dc61de7b3ed92c20a215db_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/metallb-rhel9-operator@sha256:4184a65bc8e4f752a485ec8fdcef88fbf7522167b49513fa23f6ae4606c0bafc_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/metallb-rhel9-operator@sha256:a41a5e4541631b27b491dc504443e70ffe97ede88b4d35d2201309f4dc91a8e2_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/metallb-rhel9-operator@sha256:b7c1c847342389d0caed56f2592e3e488ddd11a2d202e7b36da4718d12cf791f_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/metallb-rhel9-operator@sha256:c9f6085b094a39085222ada8f140ab26b24b9c5349be0c90d58b032a3725ce53_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/nmstate-console-plugin-rhel9@sha256:1ceb2241e0fcbfd6851bbcc9cd1c07b9b6161b935efe4965359286b4f62255cd_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/nmstate-console-plugin-rhel9@sha256:af311ceb628f18c2cdd18ad36e349769427600c851fb6605959093430acf2604_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/nmstate-console-plugin-rhel9@sha256:c10271cbb189dc93527e83908e38df7882c2f71a320ba150036fc1c01bcbf40e_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/nmstate-console-plugin-rhel9@sha256:c9204ae67ba683a82a187a5074b09a8e09520b52da7b6da09718c6bf99a9e889_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-ansible-rhel9-operator@sha256:0c818bf9990e57b12242e5a363bd9112794597897df7c9430f8b91cce108eaae_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-ansible-rhel9-operator@sha256:1e39f53b7bef11d71f4e30c39be4f0354c7433f9cafd340bd25ce4ceda1738f9_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-ansible-rhel9-operator@sha256:88ef365b8dc1ef3bb8e07a680a0184511e0b4e816ed0ce3b1298da33211c00cf_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-ansible-rhel9-operator@sha256:bb8d9150acf0a302c4086f532732e839c7fd0baa4313fa66f827daa188cc1ef2_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cloud-event-proxy-rhel9@sha256:58e0dfd38aa32b729552bf89f0430e24eac6f396ca1544ed0251a02ee5e50bf0_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cloud-event-proxy-rhel9@sha256:a713b1a513e604d8a8643458220fef2625f6363dd691863b50e8ab90ad9cbdd7_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cloud-event-proxy-rhel9@sha256:d5426d11d820775b4d2fd28d34331431f67aa35759ab1f921f2a578008d9a1de_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cluster-nfd-rhel9-operator@sha256:2497005b6364d31655088ef6989cba889cba05f1a6c7253b707720993c2307e0_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cluster-nfd-rhel9-operator@sha256:5630eb0dd16b3783db6a3b5e42b46e2c12d0597187542aafdf3dd02ca0e391a5_s390x as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cluster-nfd-rhel9-operator@sha256:9c2bc95afd088a43eedf4068f8a430615f495479258aab4dcc542e7d8efcc5be_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-cluster-nfd-rhel9-operator@sha256:f66d32b875d7bb22e34f7108b95ab079a2609007bb5923eaeae18a3b826b8b76_amd64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:4435de733d95087992b9257d5319de2e6f0af413a3547daed21ba9d13b6281ec_arm64 as a component of Red Hat OpenShift Container Platform 4.16
  • openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:6ec1500314c1751b9cccfeabdf71bdd9452ed2ccc55805821111441a06a8293e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16
  • +18 more not shown

✅ Remediation

For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/

🔗 References (9)