Red Hat Security Advisory

RHSA-2025:22275

OpenShift Container Platform 4.13.62 bug fix and security update

Released 2025-12-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202511261311-0

Fixes 5 records

TI-2025-04773 CVE-2025-5318 · GHSA-98qw-prqm-9f4p

Libssh: out-of-bounds read in sftp_handle()

MEDIUM 41

A flaw was found in the libssh library in versions less than 0.11.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01886 Published 2025-06-24 Fixed in 0.11.2, 0.11.1-4.el10_0 +31 CWE-125

TI-2025-32660 CVE-2025-52565 · GHSA-qw9x-cqr3-wc7r

container escape due to /dev/console mount and related races

LOW 38

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00811 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-22394 CVE-2025-31133 · GHSA-9493-h29p-rfm2

runc container escape via "masked path" abuse due to mount race conditions

LOW 37

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.01245 Published 2025-11-06 Fixed in 1.2.8, 1.3.3 +1 CWE-363

TI-2025-32917 CVE-2025-52881 · GHSA-cgrx-mc8f-2prm

runc: LSM labels can be bypassed with malicious config using dummy procfs files

LOW 35

runc is a CLI tool for spawning and running containers according to the OCI specification.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00801 Published 2025-11-06 Partial fix · 1.2.8, 1.13.0 +2 CWE-363

TI-2025-04441 CVE-2025-4953 · GHSA-m68q-4hqr-mc6f

Podman: build context bind mount

LOW 35

A flaw was found in Podman.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00639 Published 2025-09-16 Fixed in 8100020250911075811.afee755d, 3:4.2.0-15.rhaos4.12.el9 +28 CWE-378