Red Hat Security Advisory

RHSA-2025:21328

OpenShift Container Platform 4.14.59 packages and security update

Released 2025-11-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 containernetworking-plugins-1:1.4.0-5.rhaos4.14.el8, cri-o-1.27.8-16.rhaos4.14.gite1422c1.el8, cri-o-1.27.8-16.rhaos4.14.gite1422c1.el9 +8

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395

TI-2025-32660 CVE-2025-52565 · GHSA-qw9x-cqr3-wc7r

LOW 38

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00811 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-22394 CVE-2025-31133 · GHSA-9493-h29p-rfm2

LOW 37

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.01245 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-32917 CVE-2025-52881 · GHSA-cgrx-mc8f-2prm

LOW 35

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00801 Published 2025-11-06 Partial fix · 1.2.8, 1.13.0 +2 CWE-363