TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq
Request smuggling due to acceptance of invalid chunked data in net/http
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
RHSA-2025:10294
OpenShift Container Platform 4.17.35 bug fix and security update
Released 2025-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 4 records
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2025-04297 CVE-2025-4802 · GHSA-8mm9-c4mg-vfjh
Untrusted search path in GNU glibc
Priority LOW 37
Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlo…
TI-2024-30537 CVE-2024-45497 · GHSA-9786-79mw-2pj9
Incorrect permission assignment in openshift
Priority LOW 34
A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod.