Red Hat Security Advisory

RHSA-2025:13933

OpenShift Container Platform 4.19.9 bug fix and security update

Released 2025-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202508112354-0, rhcos-ppc64le-4.19.9.6.202508112354-0, rhcos-s390x-4.19.9.6.202508112354-0 +1

Fixes 2 records

TI-2025-30709 CVE-2025-48384

Git allows arbitrary code execution through broken config quoting

CRITICAL 94KEV

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

CVSS 3.1HIGH 8.1 Network Low privileges User interaction EPSS 0.04379 Published 2025-07-08 Partial fix · 2.43.7, 2.44.4 +6 CWE-436

TI-2025-30710 CVE-2025-48385

Git alllows arbitrary file writes via bundle-uri parameter injection

MEDIUM 41

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.0106 Published 2025-07-08 Partial fix · 2.43.7, 2.44.4 +6 CWE-73