Red Hat Security Advisory

RHSA-2025:12439

OpenShift Container Platform 4.17.37 security and extras update

Released 2025-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift4/ingress-node-firewall-rhel9-operator, openshift4/ose-cloud-event-proxy-rhel9, openshift4/ose-ptp-rhel9-operator +2

Fixes 1 record

TI-2024-30409 CVE-2024-45339 · GHSA-6wxm-mpqj-6jpf

Vulnerability when creating log files in github.com/golang/glog

LOW 33

When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00318 Published 2025-01-28 Partial fix · 1.2.4 CWE-377