Red Hat Security Advisory

RHSA-2025:14397

OpenShift Container Platform 4.15.57 bug fix and security update

Released 2025-08-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8, registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9 +2

Fixes 2 records

TI-2024-30409 CVE-2024-45339 · GHSA-6wxm-mpqj-6jpf

Vulnerability when creating log files in github.com/golang/glog

LOW 33

When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00318 Published 2025-01-28 Partial fix · 1.2.4 CWE-377

TI-2024-06062 CVE-2024-6538 · GHSA-v3w7-g6p2-mpx7

Openshift-console: openshift console: server-side request forgery

LOW 31

A flaw was found in OpenShift Console.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00584 Published 2024-11-25 Fixed in 6.0.6, v4.16.0-202506020836.p0.g94ae640.assembly.stream.el9 +4 CWE-918