Red Hat Security Advisory

RHSA-2025:11351

OpenShift Container Platform 4.15.55 bug fix and security update

Released 2025-07-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 openshift4/ose-nutanix-machine-controllers-rhel9, openshift4/ose-powervs-machine-controllers-rhel9

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286

TI-2024-34649 CVE-2024-51744 · GHSA-29wx-vh33-7x7r

LOW 16

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00585 Published 2024-11-04 Partial fix · 4.5.1 CWE-755