Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Security Measurement
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Insights
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Insights
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2025:0023 - Bug Fix Advisory
Issued:
2025-01-08
Updated:
2025-01-08

RHBA-2025:0023 - Bug Fix Advisory

  • Overview
  • Updated Images

Synopsis

OpenShift Container Platform 4.17.11 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.17.11 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.17.11. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHBA-2025:0026

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html

Solution

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html

You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:80078b22e5e6e215141bd8300c0e0392ada651334a6f3f4fc340f6a8076d1166

(For s390x architecture)
The image digest is sha256:a49380dfb0d48ecef65e3bd9a19a51d37537d9b951a780eb5e682a96fd7eb0f8

(For ppc64le architecture)
The image digest is sha256:16c452ea5b908c121009cfb569a91b12cabe34e19abcd26b253a7f24d7e7c657

(For aarch64 architecture)
The image digest is sha256:3c46760011f395f3b303e46fb7f5b8e95cf876268171df086bb90d6c1efab567

All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.17/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

  • Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64

Fixes

  • OCPBUGS-38292 - upgrades from 4.17 to 4.18 currently default to crun
  • OCPBUGS-41868 - there is no Destination CA certificate section
  • OCPBUGS-44187 - Console plugin missing required scc annotation
  • OCPBUGS-45964 - Invalid PerformanceProfile cpus panics on validation webhook
  • OCPBUGS-46039 - Azure Cloud Controller Manager Panic
  • OCPBUGS-46360 - [aws] missing ec2:AllocateAddress permission when Ipv4Pool is enabled
  • OCPBUGS-46364 - [Openshift - 4.17] Backport upstream issue 115819
  • OCPBUGS-46429 - Too many pending CSRs lead to scaleup failures when scaling to 500 nodes
  • OCPBUGS-46593 - kube-storage-version-migrator goes Available=False with reason=KubeStorageVersionMigrator_Deploying during updates
  • OCPBUGS-47522 - Update cluster-api-actuator-pkg labels to distinguish different tests
  • OCPBUGS-47679 - e2e: add irdma to module_blacklist kernel args

CVEs

  • CVE-2024-8508
  • CVE-2024-9287
  • CVE-2024-50602

References

(none)

aarch64

openshift4/driver-toolkit-rhel9@sha256:7d1fda4ba684067583a95c1308d09aabaef3add2fbe013838234424a01b07792
openshift4/kube-metrics-server-rhel9@sha256:e6c4f56e5305d149882bb70d0e513788ec8d2c40f3899e78941d068b8f554c8b
openshift4/network-tools-rhel9@sha256:881a1568c3e40c87ab7bcc3db1c83b0bf1016166df59f1f5c8fd6c64c617dfdc
openshift4/ose-azure-cloud-controller-manager-rhel9@sha256:836a51788077d67887f35275c27a78b5665b865703b8f277c50e4ff628eb20e4
openshift4/ose-azure-cloud-node-manager-rhel9@sha256:6118af892757d73391740033e89af16febf2ee48e94252dd316e278348c1fde2
openshift4/ose-baremetal-installer-rhel9@sha256:76c64936169ef139e1c89f2d880f16f4cfbee4b9f564f8c194ad5fefa000aa3d
openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:bc3652f11580963653dc8af5dee429b353de58fb265f4f921d2eaa3c486f4cdf
openshift4/ose-cluster-machine-approver-rhel9@sha256:6452fade21714de1fe4b6c76f39b3f17077fd25d42894b5bf629f5d30c5f7837
openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d3238286e688747316b237e498c9ca3ecc7194454dbed2c43c8486b792e359b9
openshift4/ose-docker-builder-rhel9@sha256:d598d515fb27f204b0ebc1306605b7773f378094bfaeede592825c39a9ce6e36
openshift4/ose-hypershift-rhel9@sha256:8fd0240c81c8745461a1fdf1d49b7762e8f080eb9b6b3c8d795803e71afdb3cc
openshift4/ose-installer-altinfra-rhel9@sha256:62633e5cf350adef93fadce1efe510db72aabf3cc42c344597e8bae0467c1902
openshift4/ose-installer-artifacts-rhel9@sha256:79c118d5ea0e57b98cca98ebd3b4d35e5c8b9d787d1594e98f2b925ffd40bef9
openshift4/ose-installer-rhel9@sha256:27116a635e0d89a531c5e43d644615ff32534a2e476ee5bf04a0f1d219577e8d
openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:24c8c98398b462638097ea9e22ae072f78ef32c0fad69550106e2a8493cba41e
openshift4/ose-machine-config-rhel9-operator@sha256:0966f32b7c75aaecff22a413a7d7e382665f076ebf89a83fce4231629c3397dc
openshift4/ose-machine-os-images-rhel9@sha256:40f095b112ae6017f2be01139e2c87a3df2a0271beeb5c72646d7efbe520ba38
openshift4/ose-operator-framework-tools-rhel9@sha256:d7a4bbcb7bcdfa061c2c1e91d43030ebdad3e4b3f8ce8d2e22c7d3f5093cbbdd
openshift4/ose-operator-lifecycle-manager-rhel9@sha256:a0d36a6fe16fd82eec755727cff2686de20f85572329623a836264eb0f2d57c8
openshift4/ose-operator-registry-rhel9@sha256:b91225a74f8b0cf719bd801abe307da1619c7d1b3eb7e61ea6a864a36d3d8f29
openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:634ec0631c1321983103470d45d97c98b56e650d0207f37b9d1cedc8ca7bd150
openshift4/ose-ovn-kubernetes-rhel9@sha256:1c56434950c39e9360e5947329fc2ba23b860d36eb18c66609d85d408981dcc2

ppc64le

openshift4/driver-toolkit-rhel9@sha256:119d3170616271a67c6be2e688bba75981486cc6cc46769d37f76e62163a5863
openshift4/kube-metrics-server-rhel9@sha256:144ffe5ea261e9f1397ed0862bba24ed803ee2cc73ab2d0932e9af926197a8d5
openshift4/network-tools-rhel9@sha256:d1bc62dd52b27faf8a18167c07f7b4768b0be23a1b5d41f29c76756fb68c607a
openshift4/ose-baremetal-installer-rhel9@sha256:825ce81ab097cbcb4f63ab9721da5632a89c97ced8db974e271454a9b226a8fd
openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:c186265e0453e5dcc213d6c2c04f7e72cccb8f780e4201906fd8bf7d6cafa6f2
openshift4/ose-cluster-machine-approver-rhel9@sha256:3d2206b2316c8942b06d9c27a50ee4de72f9bc867dba03029ea657ab33dffbf5
openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e4146b189a259abe4f162471cd0adecd63416639b9e8c11c6f6f0122ab249ffe
openshift4/ose-docker-builder-rhel9@sha256:f17aa9b6d6870da9be5352d0fb5e35f57b120778a7a6668e281a16e0cdad3e14
openshift4/ose-hypershift-rhel9@sha256:50675e4e0dbf08ab0274290f883787b11377247aafd2f429be06cb063d8f552c
openshift4/ose-installer-altinfra-rhel9@sha256:29933b3c73e36b128c11ca8ab6741a19d827e270b8ab439b63eb1f6f0758f33a
openshift4/ose-installer-artifacts-rhel9@sha256:1bc06f00062b9c90b0cb3d93c3b8ecb5d8f608c0726acb27c5408f8f5887c2f9
openshift4/ose-installer-rhel9@sha256:81c0e2c6bb45d3278a4dced1b0130cf915f1ffe240741a7f152c3cca6357852e
openshift4/ose-machine-config-rhel9-operator@sha256:520887a122cc3360ef8a24d66e4cf9d8ada1759383d914f047bbecd24ca72625
openshift4/ose-machine-os-images-rhel9@sha256:e0b8675e93c09dce5390c74634571d5d2051af98f2aaade2be87db06c8ff7c1d
openshift4/ose-operator-framework-tools-rhel9@sha256:8856f465f96ca7dc21161d4901f196bb33e655526afa65b457faffff23777784
openshift4/ose-operator-lifecycle-manager-rhel9@sha256:2cfb2cf416bde4a4808ee90381e7a222dabbab8ea4ccdf5c99cfa11cb27f661e
openshift4/ose-operator-registry-rhel9@sha256:4178b37f0e64e84d01b871011532ae7a0f5a0beec7205d45662812b92d309435
openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:06eb5c9c6144487e63e6e180c22bbb1ea04c18ff3615a5288e28a6bf014272f6
openshift4/ose-ovn-kubernetes-rhel9@sha256:cea51842d0c1f3ffa04c31ec3912ebcc189741c33f5f4106ff8d4b7768477e57

s390x

openshift4/driver-toolkit-rhel9@sha256:ae05ce98d83fdad2bb17b7e6d9c596f1a26703761297bdbc8fa87599fe3f5f8e
openshift4/kube-metrics-server-rhel9@sha256:1daf85e3330e98e693aa9724de476fc8c344823914dafcb930ce03383f84902c
openshift4/network-tools-rhel9@sha256:f17045865aae442b10a8f8a56cb20041482cc37c666ec35c9540e00e9a98146d
openshift4/ose-baremetal-installer-rhel9@sha256:628cfb50ad469b3e1922f8cd3bcdd085e7ba8ad3e3d8e29d90986e9642ebd838
openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:bddc2cdab22e4463411be332ad446ce217e9a31852a441efbd0149da4da29028
openshift4/ose-cluster-machine-approver-rhel9@sha256:cda6f01b58aceabfa4ae009489d6dce452cb2fb8ea4177410a9831e909a98350
openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:0ffa48bf7b9e3371f69b8933e54612a9241d62835458a4d0197e689da5b3ae47
openshift4/ose-docker-builder-rhel9@sha256:645a4eb340833fa60d02ed9e5a413db0b94b4ab7e61c4a9ced62a3dc3e8610ee
openshift4/ose-hypershift-rhel9@sha256:d682e4f099486efe8406c9cc8e3f0e02874ecf1ea6b82ee7ab50d11920c49002
openshift4/ose-installer-altinfra-rhel9@sha256:ccd15f5593c5cf177ddcae0198ad1b7a7fe4e6553cea7588731f0874214ce733
openshift4/ose-installer-artifacts-rhel9@sha256:60a851f0983579ab359116a9d4e11ef50f975ece204b42e76206aad3df9c3582
openshift4/ose-installer-rhel9@sha256:5065e4887ba3c4dec6815673f09fc3a420fc8a39d22751482024ef742d2f438a
openshift4/ose-machine-config-rhel9-operator@sha256:e16e5e582b7ac6643dcdba618835772266bb09b4f775053f75ff199d9a180c83
openshift4/ose-machine-os-images-rhel9@sha256:c2103e2bcf97746e8bc651acd5bb895f4109c347989719a8a5a68e127849e2b7
openshift4/ose-operator-framework-tools-rhel9@sha256:6b0839f0cf077ece5c5d105ab51bc620b2035803629d66af891411ec755cd053
openshift4/ose-operator-lifecycle-manager-rhel9@sha256:673e6f25e3530875d8b6fd660baeab87c1a808e7a3d627a364e74bb06c3fbe3c
openshift4/ose-operator-registry-rhel9@sha256:6e21fdca371ffacac352249a31bb6698db47c0347cfb25a47cb346eb2490fd13
openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:cc9bf5c2b1ad7fd1eb3603117e983872d98be9de250b5d915c9db1d61870cf10
openshift4/ose-ovn-kubernetes-rhel9@sha256:c71db1f61eb63d5874cd2549539f8179f257259c9a46785cef65d75e683445b7

x86_64

openshift4/driver-toolkit-rhel9@sha256:47ba8a10d5938c41f907ee7f70d74aecb9c2dfd7afae4cea2942fc8f47256612
openshift4/kube-metrics-server-rhel9@sha256:8773bb57f0be2c52f8ab9e8ea7f8cb453dc275810c261c125372047e97be1b87
openshift4/network-tools-rhel9@sha256:f4724fcf3d94039905f9457fab1bd323b3b503500621baecd4ecd5f1c5490ac2
openshift4/ose-azure-cloud-controller-manager-rhel9@sha256:26d74c367ed6315a6207ed0833ec661b52a52699e3c5b79064aa3119f91141ee
openshift4/ose-azure-cloud-node-manager-rhel9@sha256:e043f8bf59d57894e9cf9483aa3ec04d488bce643d719025b8a11ea1bfdc0982
openshift4/ose-baremetal-installer-rhel9@sha256:d3bb2f58d5825c9037e50cba7ec2a649f8bb6396f78e2545b8c1b96de0772a92
openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:b51e18773a29d71443caae8256a89513485f8846f4304d031dbb157d0a5071eb
openshift4/ose-cluster-machine-approver-rhel9@sha256:accaa74caadbfe75b812b9f04fc333a937c8fd4aa9e00bd1c0e211f4c3e3c357
openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:9cdbf0ef7ff7cc2daea925649b832e5c6b41c42342563b787a83f5fa183bc285
openshift4/ose-docker-builder-rhel9@sha256:2f2e96b650ba36089e4e676b5d2e1f240108d98072bb9b3c28b9b3eacddd774f
openshift4/ose-hypershift-rhel9@sha256:ccbe091b18024c9fead7bef96c6539423f550d1abca8153a4af95d365776a993
openshift4/ose-installer-altinfra-rhel9@sha256:70c72d67f4e267ef526fa28caf9669af413c32486e8fd8ead7167e2eb15ab927
openshift4/ose-installer-artifacts-rhel9@sha256:e864b9e30e070e37535379c7fcb241e8e714f9674cd3230fab03a17846bbc1c8
openshift4/ose-installer-rhel9@sha256:2ec1c4d9c6d134ec04866421181aa0137bab9daa093a8074ef2ea830f41d860f
openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:8caa3ed4117cff7e327cb63cc699f29d7b294d38d5e0fd6b1c0ef18f1af2027c
openshift4/ose-machine-config-rhel9-operator@sha256:896c224883cb10bd8d189bdb93f82612f537b3b419ee4d406ebf167a59428947
openshift4/ose-machine-os-images-rhel9@sha256:8ed6194ee2c33d7ccbfa493ff5e1ea271b76c155cfb172beed28d27f81eeec62
openshift4/ose-operator-framework-tools-rhel9@sha256:ab480057d590917cfbd84b5faa707196aea2d046f3cc2a273c53596ccbb8316f
openshift4/ose-operator-lifecycle-manager-rhel9@sha256:82ff155c5e7118a86952f86cba21da8e249f74f0a8f1ac0f2161e2bc1e3b3dbf
openshift4/ose-operator-registry-rhel9@sha256:8b402cf92e1a9ec8f564411568c3f8234b43c9775ff2561dca06b515d2034bfa
openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:859ffa8aab8af19b5a039c556acb077e24aa1a3f2fb1835a1f28ba4b52d4ca5e
openshift4/ose-ovn-kubernetes-rhel9@sha256:9c47609b3d24561f5197d71e7866e1a0dc218f19d8b822f8a96c3594c9ec39dc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility