Red Hat Security Advisory

RHSA-2025:21329

OpenShift Container Platform 4.14.59 bug fix and security update

Released 2025-11-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202511122212-0, rhcos-ppc64le-414.92.202511122212-0, rhcos-s390x-414.92.202511122212-0 +1

Fixes 2 records

TI-2025-10595 CVE-2025-11561 · GHSA-gj84-8vfx-q3vm

Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

MEDIUM 42

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00823 Published 2025-10-09 Partial fix · 2.10.2-3.el10_0.3, 2.11.1-2.el10_1.1 +22 CWE-269

TI-2025-04773 CVE-2025-5318 · GHSA-98qw-prqm-9f4p

Libssh: out-of-bounds read in sftp_handle()

MEDIUM 41

A flaw was found in the libssh library in versions less than 0.11.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01886 Published 2025-06-24 Fixed in 0.11.2, 0.11.1-4.el10_0 +31 CWE-125