Red Hat Security Advisory

RHSA-2025:10781

OpenShift Container Platform 4.16.44 bug fix and security update

Released 2025-07-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47

Fixes 3 records

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

Request smuggling due to acceptance of invalid chunked data in net/http

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395

TI-2025-23529 CVE-2025-32462 · GHSA-c5x2-97hm-x895

Incorrect authorization in Sudo

MEDIUM 45

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.04477 Published 2025-06-30 Fixed in 1.9.17p1 CWE-863

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

Unexpected memory consumption during token parsing in golang.org/x/oauth2

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286