Red Hat Security Advisory

RHSA-2025:0876

OpenShift Container Platform 4.17.15 bug fix and security update

Released 2025-02-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift4/ose-docker-builder-rhel9, openshift4/ose-networking-console-plugin-rhel9

Fixes 2 records

TI-2024-35311 CVE-2024-52798 · GHSA-rhx6-c78j-4q9w

path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

MEDIUM 41

path-to-regexp turns path strings into a regular expressions.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00787 Published 2024-12-05 Partial fix · 0.1.12 CWE-1333

TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22