Red Hat Security Advisory

RHSA-2025:15332

OpenShift Container Platform 4.12.80 bug fix and security update

Released 2025-09-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8 +6

Fixes 3 records

TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp

jwt-go allows excessive memory allocation during header parsing

MEDIUM 40

golang-jwt is a Go implementation of JSON Web Tokens.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00811 Published 2025-03-21 Partial fix · 4.5.2, 5.2.2 CWE-405

TI-2024-30409 CVE-2024-45339 · GHSA-6wxm-mpqj-6jpf

Vulnerability when creating log files in github.com/golang/glog

LOW 33

When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00318 Published 2025-01-28 Partial fix · 1.2.4 CWE-377

TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63

Non-linear parsing of case-insensitive content in golang.org/x/net/html

LOW 32

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01072 Published 2024-12-18 Partial fix · 0.33.0 CWE-1333