Red Hat Security Advisory

RHSA-2025:10771

OpenShift Container Platform 4.19.4 bug fix and security update

Released 2025-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 openshift4/ose-oauth-apiserver-rhel9, rhcos

Fixes 2 records

TI-2024-30407 CVE-2024-45337 · GHSA-v778-237x-gjrc

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

MEDIUM 53

Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03181 Published 2024-12-11 Partial fix · 0.31.0 CWE-285

TI-2025-23529 CVE-2025-32462 · GHSA-c5x2-97hm-x895

Incorrect authorization in Sudo

MEDIUM 45

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.04477 Published 2025-06-30 Fixed in 1.9.17p1 CWE-863