Red Hat Security Advisory

RHSA-2025:0715

Red Hat OpenShift Builds 1.1

Released 2025-01-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Builds for Red Hat OpenShift 1.1.1 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6

Fixes 2 records

TI-2025-15573 CVE-2025-21613 · GHSA-v725-9546-7q7m

go-git has an Argument Injection via the URL field

MEDIUM 44

go-git is a highly extensible git implementation library written in pure Go.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01278 Published 2025-01-06 Partial fix · 5.13.0 CWE-88

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333