Red Hat Security Advisory

RHSA-2025:12323

OpenShift Container Platform 4.12.79 bug fix and security update

Released 2025-08-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-image-registry-operator, rhcos

Fixes 2 records

TI-2025-23529 CVE-2025-32462 · GHSA-c5x2-97hm-x895

Incorrect authorization in Sudo

MEDIUM 45

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.04477 Published 2025-06-30 Fixed in 1.9.17p1 CWE-863

TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9

Unexpected memory consumption during token parsing in golang.org/x/oauth2

MEDIUM 40

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0087 Published 2025-02-26 Partial fix · 0.27.0 CWE-1286